CVE-2020-1714
published 2020-05-13CVE-2020-1714: A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker…
PriorityP353high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
2.60%
83.7th percentile
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| quarkus | quarkus | <= 1.4.2 | — |
| red_hat | keycloak | — | — |
| redhat | decision_manager | — | — |
| redhat | jboss_fuse | — | — |
| redhat | keycloak | < 11.0.0 | 11.0.0 |
| redhat | process_automation | — | — |
| redhat | single_sign-on | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
vendor_redhat·2020-05-11·CVSS 8.8
CVE-2020-1714 [HIGH] CWE-20 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
A flaw was found in Keycloak, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
Mitigation: There is currently no known mitigation for this issue.
Package: keycloak (Red Hat Mobile Application Plat
OSV
Improper Input Validation in Keycloak
osv·2022-02-09
CVE-2020-1714 [HIGH] Improper Input Validation in Keycloak
Improper Input Validation in Keycloak
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
GHSA
Improper Input Validation in Keycloak
ghsa·2022-02-09
CVE-2020-1714 [HIGH] CWE-20 Improper Input Validation in Keycloak
Improper Input Validation in Keycloak
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code execution.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-25665 ImageMagick: heap-based buffer overflow in WritePALMImage in coders/palm.c
bugzilla·2020-10-26·CVSS 5.5
CVE-2020-25665 [MEDIUM] CVE-2020-25665 ImageMagick: heap-based buffer overflow in WritePALMImage in coders/palm.c
CVE-2020-25665 ImageMagick: heap-based buffer overflow in WritePALMImage in coders/palm.c
In ImageMagick, there is a heap-buffer-over-flow at coders/palm.c:956:21 in WritePALMImage.
Reference:
https://github.com/ImageMagick/ImageMagick/issues/1714
Upstream patch:
https://github.com/ImageMagick/ImageMagick/commit/cfd829bd3581b092e0a267b3deba46fa90b9bc88
Discussion:
Flaw summary:
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability.
---
Acknowledgments:
Name: Suhwan Song (Seoul National University)
---
Statemen
Bugzilla
CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
bugzilla·2019-05-03·CVSS 8.8
CVE-2020-1714 [HIGH] CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution
The Keycloak code base contains some usages of ObjectInputStream without any type checks. This could be exploited by attackers being able to inject arbitrarily serialized Java Objects which would then get deserialized in a priviliged context potentially leading to Remote Code Execution.
References:
https://github.com/keycloak/keycloak/pull/7053
https://issues.jboss.org/browse/KEYCLOAK-10162
Discussion:
Red Hat Mobile application platform (RHMAP) does not make use of the Keycloak Kerberos 5 Delegated Authorization feature, which does the unsafe deserialization. The other usage of ObjectInputStream pointed out in KEYCLOAK-10162 is used for reading the KeycloakSecurityContext out of the HTTP cach
2020-05-13
Published