Skip to content
OpenAdvisories
Critical RHSA-2020:0310 1 CVE

Red Hat Security Advisory: rh-java-common-xmlrpc security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-xmlrpc 1:3.1.3-8.17.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-xmlrpc-client 1:3.1.3-8.17.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-xmlrpc-common 1:3.1.3-8.17.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-xmlrpc-javadoc 1:3.1.3-8.17.el6
Red Hat · RHEL 3 rhel_software_collections:3::el6 rh-java-common-xmlrpc-server 1:3.1.3-8.17.el6
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-xmlrpc 1:3.1.3-8.17.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-xmlrpc-client 1:3.1.3-8.17.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-xmlrpc-common 1:3.1.3-8.17.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-xmlrpc-javadoc 1:3.1.3-8.17.el7
Red Hat · RHEL 3 rhel_software_collections:3::el7 rh-java-common-xmlrpc-server 1:3.1.3-8.17.el7

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1775193
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0310.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-17570
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-17570
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-17570
  • article
    https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp