CVE-2018-1051

🗓️ 25 Jan 2018 20:00:29Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 30 Views

The fix for CVE-2016-9606 in versions 3.0.22 and 3.1.2 is incomplete. Yaml unmarshalling in Resteasy is still possible via `Yaml.load()`

Reporter	Title	Published	Views	Family All 53
OSV	CVE-2018-1051	25 Jan 201820:29	–	osv
OSV	Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider	13 May 202201:33	–	osv
OSV	RHSA-2017:1256 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 5	29 Sep 202417:08	–	osv
OSV	JBoss RESTEasy vulnerable to Improper Input Validation	14 May 202202:37	–	osv
OSV	CVE-2016-9606	9 Mar 201820:29	–	osv
OSV	RHSA-2017:1254 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 6	29 Sep 202417:08	–	osv
OSV	RHSA-2017:1253 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.15 update on RHEL 7	29 Sep 202417:08	–	osv
OSV	RHSA-2017:1260 Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update	29 Sep 202417:08	–	osv
OSV	RHSA-2017:1412 Red Hat Security Advisory: eap7-jboss-ec2-eap security update	29 Sep 202417:09	–	osv
OSV	RHSA-2017:1411 Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.6 on Red Hat Enterprise Linux 7	29 Sep 202417:08	–	osv

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	999	all	resteasy	3.6.2-3	resteasy_3.6.2-3_all.deb
Debian	12	all	resteasy3.0	3.0.26-6	resteasy3.0_3.0.26-6_all.deb
Debian	11	all	resteasy3.0	3.0.26-2	resteasy3.0_3.0.26-2_all.deb
Debian	999	all	resteasy3.0	3.0.26-6	resteasy3.0_3.0.26-6_all.deb
Debian	13	all	resteasy3.0	3.0.26-6	resteasy3.0_3.0.26-6_all.deb

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Jan 2018 20:29Current

7.8High risk

Vulners AI Score7.8

CVSS26.8

CVSS38.1

EPSS0.02156