NVD

Id
17628  
Name
CVE-2016-1181  
Description
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-07-04  
Modified Date
2016-11-28  
Seq
2016-1181  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97207 17628 CVE-2016-1181 JVN#03188560  View
97208 17628 CVE-2016-1181 JVNDB-2016-000096  View
97209 17628 CVE-2016-1181 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
97210 17628 CVE-2016-1181 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
97211 17628 CVE-2016-1181 91068  View
97212 17628 CVE-2016-1181 91787  View
97213 17628 CVE-2016-1181 https://bugzilla.redhat.com/show_bug.cgi?id=1343538  View
97214 17628 CVE-2016-1181 https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8  View
97215 17628 CVE-2016-1181 https://security-tracker.debian.org/tracker/CVE-2016-1181  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
94 JVNDB-2016-000096 Apache Struts 1 におけるメモリ上にあるコンポーネントを操作可能な脆弱性 Apache Struts 1 の ActionForm は、次の 2 つの条件が成立する場合、Servlet や ClassLoader など、サーバのメモリ上にあるコンポーネントを操作可能な脆弱性が存在します。 CVE-2016-1181 87687 CVE-2016-1181 17628 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000096.html 2016-06-07 2016-11-22 View