CVE-2016-2510

Опубликовано: 07 апр. 2016

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Высокий

Описание

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00078.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0539.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0540.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2035.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3504
Third Party Advisory
http://www.securityfocus.com/bid/84139
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1035440
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2923-1
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1135
Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1376
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1545
Third Party Advisory
https://github.com/beanshell/beanshell/commit/1ccc66bb693d4e46a34a904db8eeff07808d2ced
Patch
Third Party Advisory
https://github.com/beanshell/beanshell/commit/7c68fde2d6fc65e362f20863d868c112a90a9b49
Patch
Third Party Advisory
https://github.com/beanshell/beanshell/releases/tag/2.0b6
Patch
Third Party Advisory
https://github.com/frohoff/ysoserial/pull/13
Exploit
Third Party Advisory
https://security.gentoo.org/glsa/201607-17
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.rsaconference.com/writable/presentations/file_upload/asd-f03-serial-killer-silently-pwning-your-java-endpoints.pdf
Exploit
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00056.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:beanshell:beanshell:1.0:*:*:*:*:*:*:*

cpe:2.3:a:beanshell:beanshell:2.0:beta1:*:*:*:*:*:*

cpe:2.3:a:beanshell:beanshell:2.0:beta4:*:*:*:*:*:*

cpe:2.3:a:beanshell:beanshell:2.0:beta5:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.70425

Высокий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-19

Связанные уязвимости

CVE-2016-2510

CVSS3: 8.1

ubuntu

больше 10 лет назад

CVE-2016-2510

CVSS3: 7.4

redhat

больше 10 лет назад

CVE-2016-2510

CVSS3: 8.1

debian

больше 10 лет назад

BeanShell (bsh) before 2.0b6, when included on the classpath by an app ...

openSUSE-SU-2016:0788-1

suse-cvrf

больше 10 лет назад

Security update for bsh2

SUSE-SU-2016:0700-1

suse-cvrf

больше 10 лет назад

Security update for bsh2

EPSS

Процентиль: 99%

0.70425

Высокий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-19