Skip to content
OpenAdvisories
Critical DSA-4619-1 1 CVE

libxmlrpc3-java - security update

Published Feb 6, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 libxmlrpc3-java 3.1.3-9+deb10u1
Debian · 9 libxmlrpc3-java 3.1.3-8+deb9u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven