CVE-2021-20318

Reference Links

• https://bugzilla.redhat.com/show_bug.cgi?id=2010559
• https://access.redhat.com/security/cve/CVE-2016-4978
• https://access.redhat.com/errata/RHSA-2022:0400
• https://access.redhat.com/errata/RHSA-2022:0401
• https://access.redhat.com/errata/RHSA-2022:0404
• https://access.redhat.com/security/cve/cve-2021-20318
• https://www.cve.org/CVERecord?id=CVE-2021-20318 https://nvd.nist.gov/vuln/detail/CVE-2021-20318

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2022:0404
• RHSA-2022:0401
• RHSA-2022:0400

Frequently Asked Questions

• What is CVE-2021-20318?

  CVE-2021-20318 is a vulnerability in the HornetQ component of Artemis in EAP 7 that allows a remote attacker to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.

• What is the severity of CVE-2021-20318?

  CVE-2021-20318 has a severity rating of 7.2, which is classified as high.

• Which software versions are affected by CVE-2021-20318?

  CVE-2021-20318 affects Redhat Jboss Enterprise Application Platform versions 7.3.9 and 7.4.0, as well as versions of eap7-hornetq up to 2.4.8-1.Final_redhat_00001.1.el8ea and 2.4.8-1.Final_redhat_00001.1.el7ea.

• How can CVE-2021-20318 be fixed?

  To fix CVE-2021-20318, it is recommended to update to version 2.4.8-1.Final_redhat_00001.1.el8ea or later for eap7-hornetq, or follow the guidance provided by Red Hat in their RHSA-2022:0404 advisory.

• Where can I find more information about CVE-2021-20318?

  More information about CVE-2021-20318 can be found on the CVE website, NIST National Vulnerability Database, Red Hat Bugzilla, and Red Hat Access website.