{"action":"Upgrade org.jgroups:jgroups to 3.2.16.Final (3.2.x) or 3.6.10.Final (3.6.x) or later.","affected":[{"fixed":"3.6.10.Final","introduced":"3.3.0.Alpha1"},{"fixed":"3.2.16.Final","introduced":"0"}],"component":"org.jgroups:jgroups","cve_ids":["CVE-2016-2141"],"ecosystem":"Maven","epss":0.04698,"exploited":false,"fixed_versions":["3.6.10.Final","3.2.16.Final"],"ghsa_id":"GHSA-rc7h-x6cq-988q","id":"tcs_01M5N9BGCN0YT0CHCBYZ8C44E8","modified_at":"2024-03-09T05:19:09.364064Z","published_at":"2022-05-13T01:03:31Z","references":["https://osv.dev/vulnerability/GHSA-rc7h-x6cq-988q","https://nvd.nist.gov/vuln/detail/CVE-2016-2141","https://github.com/belaban/JGroups/commit/eeaf5241cce464ef21a2dfc4938729ade9ebef36","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://web.archive.org/web/20201207092245/http://www.securitytracker.com/id/1036165","https://web.archive.org/web/20161013163606/http://www.securityfocus.com/bid/91481","https://rhn.redhat.com/errata/RHSA-2016-1334.html","https://rhn.redhat.com/errata/RHSA-2016-1333.html","https://rhn.redhat.com/errata/RHSA-2016-1332.html","https://rhn.redhat.com/errata/RHSA-2016-1331.html","https://rhn.redhat.com/errata/RHSA-2016-1330.html","https://rhn.redhat.com/errata/RHSA-2016-1329.html","https://rhn.redhat.com/errata/RHSA-2016-1328.html","https://lists.apache.org/thread.html/rb37cc937d4fc026fb56de4b4ec0d054aa4083c1a4edd0d8360c068a0@%3Cdev.geode.apache.org%3E","https://lists.apache.org/thread.html/ra18cac97416abc2958db0b107877c31da28d884fa6e70fd89c87384a@%3Cdev.geode.apache.org%3E","https://issues.redhat.com/browse/JGRP-2074","https://issues.redhat.com/browse/JGRP-2055","https://issues.jboss.org/browse/JGRP-2021","https://github.com/belaban/JGroups","https://access.redhat.com/errata/RHSA-2016:1434","https://access.redhat.com/errata/RHSA-2016:1433","https://access.redhat.com/errata/RHSA-2016:1432","https://access.redhat.com/errata/RHSA-2016:1389","https://access.redhat.com/errata/RHSA-2016:1376","https://access.redhat.com/errata/RHSA-2016:1374","https://access.redhat.com/errata/RHSA-2016:1347","https://access.redhat.com/errata/RHSA-2016:1346","https://access.redhat.com/errata/RHSA-2016:1345","http://rhn.redhat.com/errata/RHSA-2016-1435.html","http://rhn.redhat.com/errata/RHSA-2016-1439.html","http://rhn.redhat.com/errata/RHSA-2016-2035.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rc7h-x6cq-988q","url":"https://osv.dev/vulnerability/GHSA-rc7h-x6cq-988q"}],"summary":"Improper Input Validation in JGroups"}