REDHAT-BUG-2134292: Medium severity moonlight vulnerability
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
https://github.com/x-stream/xstream/issues/304 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2134292?
The severity of REDHAT-BUG-2134292 is considered high as it may lead to Denial of Service attacks.
How do I fix REDHAT-BUG-2134292?
To fix REDHAT-BUG-2134292, ensure you update to the latest version of XStream that addresses this vulnerability.
What systems are affected by REDHAT-BUG-2134292?
The systems affected by REDHAT-BUG-2134292 are those using XStream for XML serialization.
What kind of attacks can be executed due to REDHAT-BUG-2134292?
REDHAT-BUG-2134292 can be exploited to perform Denial of Service attacks that cause the parser to crash.
Can user input trigger the vulnerability in REDHAT-BUG-2134292?
Yes, user supplied input can trigger the vulnerability in REDHAT-BUG-2134292, leading to potential crashes.