Published: 13/03/2017 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

QOS.ch Logback prior to 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qos logback
redhat satellite 6.4
redhat satellite capsule 6.4

Synopsis Important: Satellite 64 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Satellite 64 for RHEL 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring ...

Synopsis Important: Red Hat Fuse 760 security update Type/Severity Security Advisory: Important Topic A minor version update (from 75 to 76) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Product Security h ...

Debian Bug report logs - #857343 logback: CVE-2017-5929: serialization vulnerability affecting the SocketServer and ServerSocketReceiver components Package: liblogback-java; Maintainer for liblogback-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Source for liblogback-java is src:logback (PTS, buildd ...

It was found that logback is vulnerable to a deserialization issue Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data Authenticated attackers on the adjacent network can leverage this vulnerability to execute arbitrary code through deserialization of cus ...

¯\_(ツ)_/¯

exploits - 0days ¯_(ツ)_/¯ Apache Axis2 SOAPMonitorService python soap-monitor-service-exploitpy Java deserialization file upload proof of concept If there are dangerous gadgets in the classpath (like commons-collections), remote code execution can also happen SOAPMonitorService is disabled by default, but it can be dangerous if someone is pivoting in an interna

An IDS storage plugin for the HZB

idsstorage_hzb - An IDS storage plugin for the HZB This is an IDS storage plugin adapted to the needs of HZB For the moment, it is in an experimental stage It is mostly used to explore the IDS and to try out how IDS storage plugins can be customized Features Customized, meaningful file names in the storage The file name layout is: <storage-root>/<

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-5929

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect