CVE-2016-6199

Опубликовано: 07 фев. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

Ссылки

https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
Exploit
Technical Description
Third Party Advisory
https://philwantsfish.github.io/security/java-deserialization-github
Release Notes
Vendor Advisory
https://discuss.gradle.org/t/a-security-issue-about-gradle-rce/17726
Exploit
Technical Description
Third Party Advisory
https://philwantsfish.github.io/security/java-deserialization-github
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gradle:gradle:2.12:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02251

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVE-2016-6199

CVSS3: 9.8

ubuntu

около 9 лет назад

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

CVE-2016-6199

CVSS3: 8.1

redhat

больше 9 лет назад

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

CVE-2016-6199

CVSS3: 9.8

debian

около 9 лет назад

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to exe ...

GHSA-f65r-2xfr-g5gx

CVSS3: 9.8

github

больше 3 лет назад

ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object.

EPSS

Процентиль: 84%

0.02251

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-502