Debian/libjgroups-java: critical 9.8
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2016-2141#Debian:14/libjgroups-java
- https://security-tracker.debian.org/tracker/CVE-2016-2141
published · modified · JSON