Lucene search

K
cvelistMitreCVELIST:CVE-2017-7957
HistoryApr 29, 2017 - 7:00 p.m.

CVE-2017-7957

2017-04-2919:00:00
mitre
www.cve.org
1

0.793 High

EPSS

Percentile

98.3%

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type โ€˜voidโ€™ during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML(โ€œ<void/>โ€) call.