CVE-2017-7504

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized data.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
Red Hat, Inc.	JBoss	4.x

References

http://www.securityfocus.com/bid/98595Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1451441Issue Tracking
http://www.securityfocus.com/bid/98595Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1451441Issue Tracking

Timeline

Published: May 19, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-75058.8Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assig CVE-2017-75068.8spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attac CVE-2017-75077.5GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid cont CVE-2017-75087.5OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.CVE-2017-75096.5An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq CVE-2017-75108.8In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.CVE-2017-75115.5poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.CVE-2017-75129.8Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. CVE-2017-75135.4It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host CVE-2017-75145.4A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user ab CVE-2017-75155.5poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.CVE-2017-75173.5An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces