Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Scientific Linux 7: SLSA-2017-2486-1 Important Groovy RCE Advisory

Calendar Aug 21, 2017 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory remote code execution application security important update Scientific Linux groovy
It was found that a flaw in Apache groovy library allows remote code execution wherever deserialization occurs in the application. It is possible for an attacker to craft a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects are subject to this vulnerability. (CVE-2016-6 [More...] 
Synopsis:          Important: groovy security update
Advisory ID:       SLSA-2017:2486-1
Issue Date:        2017-08-17
CVE Numbers:       CVE-2016-6814
--

Security Fix(es):

* It was found that a flaw in Apache groovy library allows remote code
execution wherever deserialization occurs in the application. It is
possible for an attacker to craft a special serialized object that will
execute code directly when deserialized. All applications which rely on
serialization and do not isolate the code which deserializes objects are
subject to this vulnerability. (CVE-2016-6814)
--

SL7
  noarch
    groovy-1.8.9-8.el7_4.noarch.rpm
    groovy-javadoc-1.8.9-8.el7_4.noarch.rpm

- Scientific Linux Development Team