Description

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

Remediation

References

CVE-2017-1000355

Related Vulnerabilities

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.8)

Moodle Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-5153)

Apache Traffic Server CVE-2014-3525 Vulnerability (CVE-2014-3525)

WordPress Plugin Shopping Cart & eCommerce Store Unspecified Vulnerability (3.1.9)

Apache HTTP Server Other Vulnerability (CVE-2003-0245)

Severity

Medium

Classification

CVE-2017-1000355 CWE-502 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities