critique
CVE-2016-8749
camel-jacksonxml: Unmarshalling operation are vulnerable to RCE
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, GHSA. Plus basse selon Red Hat (moyenne).
Description
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| maven::GitHub Security Advisory Maven | org.apache.camel:camel-jackson | 2.16.5, 2.17.5, 2.18.2 |
Références
- http://camel.apache.org/security-advisories.data/CVE-2016-8749.txt.asc
- http://camel.apache.org/security-advisories.data/CVE-2016-8749.txt.asc?version=2&modificationDate=1486565034000&api=v2
- http://www.openwall.com/lists/oss-security/2017/05/22/2
- http://www.securityfocus.com/bid/97179
- https://access.redhat.com/errata/RHSA-2017:1832
- https://access.redhat.com/security/cve/CVE-2016-8749
- https://github.com/advisories/GHSA-vvjc-q5vr-52q6
- https://github.com/apache/camel
Les 27 références
- https://github.com/apache/camel/commit/10f552643d7e4565104d142bbc160db5a30f9f7e
- https://github.com/apache/camel/commit/235036d2396ae45b6809b72a1983dee33b5ba326
- https://github.com/apache/camel/commit/2b0e96117d6f01eba0c18e2ff8df6a438e819721
- https://github.com/apache/camel/commit/57d01e2fc8923263df896e9810329ee5b7f9b69e
- https://github.com/apache/camel/commit/5ae9c0dcc4843347cd01ffb58ce5dd0687755a14
- https://github.com/apache/camel/commit/7567488f844f01d72840f7ab6ca18114a11f20d8
- https://github.com/apache/camel/commit/83fef7108456eeac1506853d194cd1360851c4fe
- https://github.com/apache/camel/commit/881e5099f94316d4a66ffbff0a3e6915829d49d7
- https://github.com/apache/camel/commit/8c862aa11e31d0f804c4a4516a0715e05e3eebcf
- https://github.com/apache/camel/commit/abb45b2c2ada2bbb34138230540b37d259c1e98d
- https://github.com/apache/camel/commit/ccf149c76bf37adc5977dc626e141a14e60b5aee
- https://github.com/apache/camel/commit/d4102512147eca2af21c3b6ed63a67d852f4e66a
- https://issues.apache.org/jira/browse/CAMEL-10567
- https://issues.apache.org/jira/browse/CAMEL-10604
- https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E
- https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E
- https://nvd.nist.gov/vuln/detail/CVE-2016-8749
- https://www.cve.org/CVERecord?id=CVE-2016-8749
- https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true