Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-5377

Опубликовано: 06 мар. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 7.5
CVSS3: 9.8

Описание

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

devel

DNE

esm-apps/xenial

not-affected

1.7.3+dfsg-3
esm-infra-legacy/trusty

DNE

precise

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

1.6.1+dfsg-1

Показывать по

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

redhat
больше 10 лет назад

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

CVSS3: 9.8
nvd
почти 8 лет назад

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

CVSS3: 9.8
debian
почти 8 лет назад

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrar ...

CVSS3: 9.8
github
больше 3 лет назад

** DISPUTED ** Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability.

7.5 High

CVSS2

9.8 Critical

CVSS3