Lucene search

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization

🗓️ 16 Oct 2018 17:42:21Reported by GitHub Advisory DatabaseType

Apache Camel's camel-snakeyaml component vulnerabilit

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2017-3159	7 Mar 201715:59	–	cve
Veracode	Remote Code Execution (RCE)	13 Feb 201707:31	–	veracode
NVD	CVE-2017-3159	7 Mar 201715:59	–	nvd
RedhatCVE	CVE-2017-3159	9 Feb 201715:48	–	redhatcve
Cvelist	CVE-2017-3159	7 Mar 201715:00	–	cvelist
OSV	CVE-2017-3159	7 Mar 201715:59	–	osv
OSV	Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization	16 Oct 201817:21	–	osv
Prion	Design/Logic Flaw	7 Mar 201715:59	–	prion
RedHat Linux	(RHSA-2017:0868) Important: Red Hat JBoss Fuse/A-MQ 6.3 R2 security and bug fix update	3 Apr 201721:01	–	redhat
Imperva Blog	Deserialization Attacks Surge Motivated by Illegal Crypto-mining	24 Jan 201817:45	–	impervablog

Vulners

Node

org.apache.camel camel\-snakeyamlRange2.18.0–2.18.2

org.apache.camel camel\-snakeyamlRange<2.17.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-3159
access	www.access.redhat.com/errata/RHSA-2017:0868
github	www.github.com/advisories/GHSA-hvpr-9cr6-q5v7
lists	www.lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
lists	www.lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
github	www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf
camel	www.camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc
openwall	www.openwall.com/lists/oss-security/2017/05/22/2
securityfocus	www.securityfocus.com/bid/96321
github	www.github.com/apache/camel/commit/20e26226107f3133c87d0f5c845e02f824823f69

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Oct 2018 17:21Current

2.1Low risk

Vulners AI Score2.1

CVSS27.5

CVSS39.8

EPSS0.01678

CWE-502