High DLA-3267-1 1 CVE

libxstream-java - security update

Published Jan 11, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	libxstream-java	1.4.11.1-1+deb10u4

Vulnerabilities 1

High 8.2

CVE-2022-41966 Public exploit

XStream Denial of Service via stack overflow

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack…

x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven

Dec 27, 2022