CVE-2017-12629
1 advisory.
Maven/org.apache.solr:solr-core CVE-2017-12629: critical 9.8
Remote code execution occurs in Apache Solr
Action: Upgrade org.apache.solr:solr-core to 5.5.5 (5.x), 6.6.2 (6.x) or 7.1.0 (7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.1.0 | - |
| 6.0.0 | 6.6.2 | - |
| 5.5.0 | 5.5.5 | - |
Fixed versions
| 7.1.0 | 6.6.2 | 5.5.5 |
Sources
- osv: GHSA-mh7g-99w9-xpjm
- https://nvd.nist.gov/vuln/detail/CVE-2017-12629
- https://github.com/apache/lucene-solr/commit/3bba91131b5257e64b9d0a2193e1e32a145b2a2
- https://github.com/apache/lucene-solr/commit/d8000beebfb13ba0b6e754f84c760e11592d8d1
- https://github.com/apache/lucene-solr/commit/f9fd6e9e26224f26f1542224ce187e04c27b268
- https://www.exploit-db.com/exploits/43009
- https://www.debian.org/security/2018/dsa-4124
- https://usn.ubuntu.com/4259-1
- https://twitter.com/searchtools_avi/status/918904813613543424
- https://twitter.com/joshbressers/status/919258716297420802
- https://twitter.com/ApacheSolr/status/918731485611401216
- https://s.apache.org/FJDl
- https://lists.debian.org/debian-lts-announce/2018/01/msg00028.html
- https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef@%3Cusers.solr.apache.org%3E
- https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314@%3Cusers.solr.apache.org%3E
- https://lists.apache.org/thread.html/r26c996b068ef6c5e89aa59acb769025cfd343a08e63fbe9e7f3f720f@%3Coak-issues.jackrabbit.apache.org%3E
- https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc@%3Cusers.solr.apache.org%3E
- https://issues.apache.org/jira/browse/SOLR-11477
- https://github.com/apache/lucene
- https://github.com/advisories/GHSA-mh7g-99w9-xpjm
- https://access.redhat.com/errata/RHSA-2018:0005
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2017:3452
- https://access.redhat.com/errata/RHSA-2017:3451
- https://access.redhat.com/errata/RHSA-2017:3244
- https://access.redhat.com/errata/RHSA-2017:3124
- https://access.redhat.com/errata/RHSA-2017:3123
- http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E
- http://openwall.com/lists/oss-security/2017/10/13/1
- http://www.securityfocus.com/bid/101261
CVE-2017-12629 · published · modified · JSON