SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp1 | — | Upgrade resteasy-base-clientUpgrade resteasy-base-jaxrsUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-atom-provider | Nov 30, 2017 | Jun 8, 2017 |
| Oracle_linux | — | Upgrade resteasy-base-jaxrsUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-providers-pomUpgrade resteasy-base-clientUpgrade resteasy-base-resteasy-pomUpgrade resteasy-base-atom-providerUpgrade resteasy-base-jaxrs-allUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-tjwsUpgrade resteasy-baseUpgrade resteasy-base-jettison-providerUpgrade resteasy-base-javadoc | Nov 9, 2016 | Sep 23, 2016 |
| Redhat_linux | — | Upgrade resteasy-base-jaxrs-apiUpgrade resteasy-base-jaxrsUpgrade resteasy-baseUpgrade resteasy-base-resteasy-pomUpgrade resteasy-base-javadocUpgrade resteasy-base-jaxrs-allUpgrade resteasy-base-clientUpgrade resteasy-base-tjwsUpgrade resteasy-base-atom-providerUpgrade resteasy-base-jackson-providerUpgrade resteasy-base-jaxb-providerUpgrade resteasy-base-providers-pomUpgrade resteasy-base-jettison-provider | Nov 4, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade libresteasy-java (Ubuntu Pro) | Jun 26, 2025 | Jun 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub