Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-1000355

Опубликовано: 29 янв. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4
CVSS3: 6.5

Описание

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

Показывать по

Ссылки на источники

EPSS

Процентиль: 62%
0.00429
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
почти 9 лет назад

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

CVSS3: 6.5
nvd
около 8 лет назад

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

CVSS3: 6.5
debian
около 8 лет назад

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier ar ...

CVSS3: 6.5
github
больше 3 лет назад

Deserialization of Untrusted Data in Jenkins

EPSS

Процентиль: 62%
0.00429
Низкий

4 Medium

CVSS2

6.5 Medium

CVSS3