CVE-2015-5164

NONE EPSS 89.1%
Published Oct 18, 20178y ago · Modified Jun 17, 20262w ago
Find Similar
Published Oct 18, 2017 8y ago
Last Modified Jun 17, 2026 2w ago

Description

The Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows remote authenticated users with administrative access on a managed content host to execute arbitrary code via a crafted message, related to a pickle processing problem in pulp.

Threat Intelligence

EPSS Exploit Probability
89.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-502 Deserialization of Untrusted Data Validation

Affected Products 2

VendorProductVersionRange
pulpprojectqpid*any
redhatsatellite6.0any

References 2

  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1247732
    Issue TrackingThird Party Advisory
  • pulp.plan.io https://pulp.plan.io/issues/23
    Issue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.