Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.131177
Category:Mageia Linux Local Security Checks
Title:Mageia Linux Local Check: mgasa-2016-0012
Summary:Mageia Linux Local Security Checks mgasa-2016-0012
Description:Summary:
Mageia Linux Local Security Checks mgasa-2016-0012

Vulnerability Insight:
It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections library (CVE-2015-7501). With this update, deserialization of certain classes in the commons-collections library is no longer allowed. Applications that require those classes to be deserialized can use the system property org.apache.commons.collections.enableUnsafeSerialization to re-enable their deserialization.

Solution:
Update the affected packages to the latest available version.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-7501
BugTraq ID: 78215
http://www.securityfocus.com/bid/78215
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
https://access.redhat.com/security/vulnerabilities/2059393
https://access.redhat.com/solutions/2045023
https://bugzilla.redhat.com/show_bug.cgi?id=1279330
https://www.oracle.com/security-alerts/cpujul2020.html
RedHat Security Advisories: RHSA-2015:2500
http://rhn.redhat.com/errata/RHSA-2015-2500.html
RedHat Security Advisories: RHSA-2015:2501
http://rhn.redhat.com/errata/RHSA-2015-2501.html
RedHat Security Advisories: RHSA-2015:2502
http://rhn.redhat.com/errata/RHSA-2015-2502.html
RedHat Security Advisories: RHSA-2015:2514
http://rhn.redhat.com/errata/RHSA-2015-2514.html
RedHat Security Advisories: RHSA-2015:2516
http://rhn.redhat.com/errata/RHSA-2015-2516.html
RedHat Security Advisories: RHSA-2015:2517
http://rhn.redhat.com/errata/RHSA-2015-2517.html
RedHat Security Advisories: RHSA-2015:2521
http://rhn.redhat.com/errata/RHSA-2015-2521.html
RedHat Security Advisories: RHSA-2015:2522
http://rhn.redhat.com/errata/RHSA-2015-2522.html
RedHat Security Advisories: RHSA-2015:2524
http://rhn.redhat.com/errata/RHSA-2015-2524.html
RedHat Security Advisories: RHSA-2015:2536
https://rhn.redhat.com/errata/RHSA-2015-2536.html
RedHat Security Advisories: RHSA-2015:2670
http://rhn.redhat.com/errata/RHSA-2015-2670.html
RedHat Security Advisories: RHSA-2015:2671
http://rhn.redhat.com/errata/RHSA-2015-2671.html
RedHat Security Advisories: RHSA-2016:0040
http://rhn.redhat.com/errata/RHSA-2016-0040.html
RedHat Security Advisories: RHSA-2016:1773
http://rhn.redhat.com/errata/RHSA-2016-1773.html
http://www.securitytracker.com/id/1034097
http://www.securitytracker.com/id/1037052
http://www.securitytracker.com/id/1037053
http://www.securitytracker.com/id/1037640
CopyrightCopyright (C) 2016 Eero Volotinen

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.