Lucene search
RedHatRHSA-2021:0162HistoryJan 18, 2021 - 9:12 a.m.
(RHSA-2021:0162) Important: xstream security update
2021-01-1809:12:59
access.redhat.com
51
0.974 High
EPSS
Percentile
99.9%
XStream is a Java XML serialization library to serialize objects to and deserialize object from XML.
Security Fix(es):
- XStream: remote code execution due to insecure XML deserialization when relying on blocklists (CVE-2020-26217)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | xstream-javadoc | < 1.3.1-12.el7_9 | xstream-javadoc-1.3.1-12.el7_9.noarch.rpm |
| RedHat | 7 | noarch | xstream | < 1.3.1-12.el7_9 | xstream-1.3.1-12.el7_9.noarch.rpm |
Related
checkpoint_advisories
checkpoint_advisories
XStream Remote Code Execution (CVE-2020-26217)
2020-12-21 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-11-17 05:32:23
ibm
ibm
osv
osv
CVE-2020-26217
2020-11-16 21:15:12
BIT-activemq-2020-26217
2024-03-06 10:51:03
libxstream-java - security update
2020-11-30 00:00:00
cvelist
cvelist
CVE-2020-26217 Remote Code Execution in XStream
2020-11-16 21:00:18
debiancve
debiancve
CVE-2020-26217
2020-11-16 21:15:12
oraclelinux
oraclelinux
xstream security update
2021-01-19 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2471-1)
2020-12-02 00:00:00
CentOS: Security Advisory for xstream (CESA-2021:0162)
2021-01-27 00:00:00
Debian: Security Advisory (DSA-4811-1)
2020-12-16 00:00:00
nessus
nessus
CentOS 7 : xstream (CESA-2021:0162)
2021-01-26 00:00:00
Amazon Linux 2 : xstream (ALAS-2021-1593)
2021-01-26 00:00:00
Scientific Linux Security Update : xstream on SL7.x (noarch) (2021:0162)
2021-01-26 00:00:00
atlassian
atlassian
redhat
redhat
debian
debian
[SECURITY] [DSA 4811-1] libxstream-java security update
2020-12-15 12:12:12
[SECURITY] [DLA 2471-1] libxstream-java security update
2020-12-01 03:37:05
ubuntucve
ubuntucve
CVE-2020-26217
2020-11-16 00:00:00
centos
centos
xstream security update
2021-01-25 14:08:47
githubexploit
githubexploit
Exploit for OS Command Injection in Xstream Project Xstream
2020-12-08 07:58:41
Exploit for OS Command Injection in Xstream Project Xstream
2021-01-22 09:56:11
Exploit for OS Command Injection in Xstream Project Xstream
2020-12-13 17:39:11
nvd
nvd
CVE-2020-26217
2020-11-16 21:15:12
nuclei
nuclei
XStream <1.4.14 - Remote Code Execution
2023-03-12 03:38:05
cve
cve
CVE-2020-26217
2020-11-16 21:15:12
amazon
amazon
Important: xstream
2021-01-25 23:09:00
prion
prion
Remote code execution
2020-11-16 21:15:00
github
github
XStream can be used for Remote Code Execution
2020-11-16 20:07:59
redhatcve
redhatcve
CVE-2020-26217
2020-11-18 10:26:26
suse
suse
Security update for xstream (important)
2021-01-22 00:00:00
ubuntu
ubuntu
XStream vulnerabilities
2021-01-28 00:00:00
XStream vulnerabilities
2021-05-11 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00