X-stream Xstream vulnerabilities

• x-stream xstream, x-stream +1 more XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream CVE-2024-47072 Fix available 7.5 HighNovember 7, 2024
• x-stream xstream XStream Denial of Service via stack overflow CVE-2022-41966 Public exploitFix available 8.2 HighDecember 27, 2022
• x-stream xstream Stack Buffer Overflow in xstream CVE-2022-40151 Fix available 6.5 MediumSeptember 16, 2022
• x-stream xstream, debian linux, fedoraproject fedora +8 more +10 more Denial of Service by injecting highly recursive collections or maps in XStream CVE-2021-43859 Fix available 7.5 HighFebruary 1, 2022
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling CVE-2021-39150 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling CVE-2021-39152 Fix available EPSS 11.4% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream can cause a Denial of Service CVE-2021-39140 Fix available 6.5 MediumAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39149 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39148 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39147 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39146 Fix available EPSS 14.3% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39145 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39141 Public exploitFix available EPSS 16.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +10 more +12 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39153 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39151 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39139 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39154 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-39144 In KEVPublic exploitFix available EPSS 98.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +14 more +16 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-29505 Public exploitFix available EPSS 77.2% 7.5 HighMay 18, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21351 Fix available EPSS 82.1% 5.4 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21350 Fix available EPSS 15.2% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +14 more +16 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21349 Public exploitFix available EPSS 46.8% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) CVE-2021-21348 Fix available EPSS 13.8% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21347 Fix available EPSS 14.3% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21346 Fix available EPSS 76.4% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-21345 Public exploitFix available EPSS 72.3% 5.8 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21344 Fix available EPSS 76.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights CVE-2021-21343 Fix available EPSS 46.7% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21342 Fix available EPSS 50.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +10 more +12 more XStream can cause a Denial of Service CVE-2021-21341 Public exploitFix available EPSS 77.8% 7.5 HighMarch 22, 2021
• x-stream xstream, apache struts, debian linux +1 more +3 more Server-Side Forgery Request can be activated unmarshalling with XStream CVE-2020-26258 Public exploitFix available EPSS 81.8% 6.3 MediumDecember 16, 2020
• x-stream xstream, apache struts, debian linux +1 more +3 more XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling CVE-2020-26259 Public exploitFix available EPSS 82.4% 6.8 MediumDecember 16, 2020
• x-stream xstream, apache activemq, debian linux +12 more +14 more Remote Code Execution in XStream CVE-2020-26217 Public exploitFix available EPSS 85.0% 8.0 HighNovember 16, 2020
• x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 more Deserialization of Untrusted Data and Code Injection in xstream CVE-2019-10173 Fix available EPSS 95.0% 7.3 HighJuly 23, 2019