VDB
BDU%3A2023-00169
BDU%3A2023-00169
PUBLISHED
CVSS 10 CRITICAL
Уязвимость интерпретатора языка программирования Scala, связанная с ошибками при десериализации данных, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, EPFL | Debian GNU/Linux, Fedora, Scala |
Timeline
- Jan 17, 2023 CVE Published
- Jan 18, 2023 CVE Updated
References
- https://discuss.lightbend.com/t/impact-of-cve-2022-36944-on-akka-cluster-akka-actor-akka-remote/10007/2 url
- https://github.com/scala/scala-collection-compat/releases/tag/v2.9.0 url
- https://www.scala-lang.org/download/ url
- https://github.com/scala/scala/pull/10118 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6ZOZVWY3X72FZZCCRAKRJYTQOJ6LUD6Z/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3WMKPFAMFQE3HJVRQ5KOJUTWG264SXI/ advisory
- https://security-tracker.debian.org/tracker/CVE-2022-36944 advisory