Skip to content
OpenAdvisories
Critical RHSA-2017:3451 1 CVE

Red Hat Security Advisory: rh-java-common-lucene security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 42

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-analysis 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-analyzers-phonetic 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-analyzers-smartcn 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-analyzers-stempel 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-classification 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-codecs 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-facet 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-grouping 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-highlighter 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-javadoc 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-join 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-memory 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-misc 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-parent 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-queries 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-queryparser 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-replicator 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-sandbox 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-solr-grandparent 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-lucene-suggest 0:4.8.0-6.9.el6
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-analysis 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-analyzers-phonetic 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-analyzers-smartcn 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-analyzers-stempel 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-classification 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-codecs 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-facet 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-grouping 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-highlighter 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-javadoc 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-join 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-memory 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-misc 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-parent 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-queries 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-queryparser 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-replicator 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-sandbox 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-solr-grandparent 0:4.8.0-6.9.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-lucene-suggest 0:4.8.0-6.9.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2017-12629 Public exploit Scanner template EPSS 92%

    Remote code execution occurs in Apache Solr

    Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulner…

    org.apache.solr:solr-core lucene-solr lucene-solr Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/vulnerabilities/CVE-2017-12629
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1501529
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3451.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-12629
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-12629
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-12629