xstream vulnerabilities

3 known vulnerabilities in xstream from X-stream. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  xstream: Stack-based Buffer Overflow

  CVE-2024-47072Nov 8, 2024X-streamEPSS 2%

  XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error resulting in a denial of service only by manipulating the processed input stream whe

• 7.5 High severity

  xstream: Uncontrolled Recursion

  CVE-2022-41966Dec 28, 2022X-streamEPSS 9.35%

  XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack

• 8.5 High severity

  XStream Remote Code Execution Exploited

  CVE-2021-39144Aug 23, 2021X-streamEPSS 98.1%

  XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affect