VDB
GCVE-110-MAGEIA-2014-100
GCVE-110-MAGEIA-2014-100
Advisory Published
Updated xstream packages fix security vulnerability:
It was found that XStream would deserialize arbitrary user-supplied XML
content, representing objects of any type. A remote attacker able to pass XML
to XStream could use this flaw to perform a variety of attacks, including
remote code execution in the context of the server running the XStream
application (CVE-2013-7285).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | xstream | 1.4.7-1.mga4 (unaffected), 0 (affected), 1.4.7-1.mga4 (unaffected), 0 (affected) | — |
| Mageia | kxml | 0 (affected), 2.3.0-5.1.mga4 (unaffected), 0 (affected), 2.3.0-5.1.mga4 (unaffected) | — |
| Mageia | xstream | 0 (affected), 1.3.1-6.1.mga3 (unaffected), 0 (affected), 1.3.1-6.1.mga3 (unaffected) | — |
| Mageia | labyrinth | 0.6-4.1.mga4 (unaffected), 0 (affected) | — |
Aliases
References
Browse GCVE Records
21,084 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.