SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp1 | — | Upgrade resteasy-base-jackson-providerUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-jaxrsUpgrade resteasy-base-clientUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-atom-provider | Nov 30, 2017 | Jun 8, 2017 |
| Oracle_linux | — | Upgrade resteasy-base-jaxrsUpgrade resteasy-base-clientUpgrade resteasy-base-providers-pomUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-resteasy-pomUpgrade resteasy-base-atom-providerUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-jaxrs-allUpgrade resteasy-base-tjwsUpgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-javadocUpgrade resteasy-base | Nov 9, 2016 | Sep 23, 2016 |
| Redhat_linux | — | Upgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-jaxrsUpgrade resteasy-base-resteasy-pomUpgrade resteasy-baseUpgrade resteasy-base-javadocUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-tjwsUpgrade resteasy-base-jaxrs-allUpgrade resteasy-base-providers-pomUpgrade resteasy-base-clientUpgrade resteasy-base-atom-providerUpgrade resteasy-base-jaxb-provider | Nov 4, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade libresteasy-java (Ubuntu Pro) | Jun 26, 2025 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub