CVE-2018-1295: Critical severity Apache Ignite vulnerability
Apache Ignite serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to one of the deserialization endpoints of some Ignite components - discovery SPI, Ignite persistence, Memcached endpoint, socket steamer.
External References:
https://lists.apache.org/thread.html/45e7d5e2c6face85aab693f5ae0616563132ff757e5a558da80d0209@%3Cdev.ignite.apache.org%3E
Other sources
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to one of the deserialization endpoints of some Ignite components - discovery SPI, Ignite persistence, Memcached endpoint, socket steamer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1295?
The severity of CVE-2018-1295 is critical with a severity value of 9.8.
How does Apache Ignite 2.3 or earlier serialization mechanism vulnerability work?
The vulnerability in Apache Ignite 2.3 or earlier allows running arbitrary code when vulnerable classes are present in Ignite classpath.
What software versions are affected by CVE-2018-1295?
Apache Ignite versions up to and including 2.3.0 are affected by CVE-2018-1295.
How can I fix the CVE-2018-1295 vulnerability?
To fix the vulnerability, upgrade Apache Ignite to version 2.4 or later.
Where can I find more information about CVE-2018-1295?
More information about CVE-2018-1295 can be found at the following references: [Link 1](https://lists.apache.org/thread.html/45e7d5e2c6face85aab693f5ae0616563132ff757e5a558da80d0209@%3Cdev.ignite.apache.org%3E), [Link 2](https://access.redhat.com/errata/RHSA-2018:2405), [Link 3](https://bugzilla.redhat.com/show_bug.cgi?id=1563133).