Insecure deserialization In java-1.7.1-ibm
Description
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | - | - | |
rpm rhel8 | 1:1.8.0.8.25-1.el8_10 |
Aliases
1. 2. 3.