« Volver al listado

CVE-2024-43383

Estado: AnalizadaAlta (8.1)—

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator.

This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016.

An attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access.

Users are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS AV:N sin autenticación (PR:N) indica explotación remota de aplicación expuesta (T1190). Deserialización de datos no confiables permite RCE (T1059). MITM entre cliente-servidor replica T1557.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementNetwork SegmentationLimit Access to Resource Over NetworkFilter Network TrafficDisable or Remove Feature or ProgramVulnerability Scanning

Tecnologías afectadas (1)

Apache — Lucene.net

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-43383",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-43383",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-31T13:51:04.181402Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@apache.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "security@apache.org",
      "affectedData": [
        {
          "vendor": "Apache Software Foundation",
          "product": "Apache Lucene.Net.Replicator",
          "versions": [
            {
              "status": "affected",
              "version": "4.8.0-beta00005",
              "versionType": "semver",
              "lessThanOrEqual": "4.8.0-beta00016"
            }
          ],
          "packageName": "Lucene.Net.Replicator",
          "collectionURL": "https://www.nuget.org/packages/Lucene.Net.Replicator/4.8.0-beta00016",
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:apache:lucene:*:*:*:*:*:*:*:*"
          ],
          "vendor": "apache",
          "product": "lucene",
          "versions": [
            {
              "status": "affected",
              "version": "4.8.0-beta00005",
              "versionType": "semver",
              "lessThanOrEqual": "4.8.0-beta00016"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-10-31T10:15:04.293",
  "references": [
    {
      "url": "https://lists.apache.org/thread/wlz1p76dxpt4rl9o29voxjd5zl7717nh",
      "tags": [
        "Mailing List"
      ],
      "source": "security@apache.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/10/31/2",
      "tags": [
        "Mailing List"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@apache.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator.\n\nThis issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016.\n\nAn attacker that can intercept traffic between a replication client and server, or control the target replication node URL, can provide a specially-crafted JSON response that is deserialized as an attacker-provided exception type. This can result in remote code execution or other potential unauthorized access.\n\n\nUsers are recommended to upgrade to version 4.8.0-beta00017, which fixes the issue."
    },
    {
      "lang": "es",
      "value": " Vulnerabilidad de deserialización de datos no confiables en Apache Lucene.Net.Replicator. Este problema afecta a la librería Replicator de Apache Lucene.NET: desde la versión 4.8.0-beta00005 hasta la 4.8.0-beta00016. Un atacante que pueda interceptar el tráfico entre un cliente y un servidor de replicación, o controlar la URL del nodo de replicación de destino, puede proporcionar una respuesta JSON especialmente manipulada que se deserializa como un tipo de excepción proporcionado por el atacante. Esto puede provocar la ejecución remota de código u otro posible acceso no autorizado. Se recomienda a los usuarios que actualicen a la versión 4.8.0-beta00017, que soluciona el problema."
    }
  ],
  "lastModified": "2026-06-17T07:50:55.480",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00005:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79E25A9C-01FC-44B3-9A5E-F5E1D3CFADD7"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00006:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7553B675-B9BE-4969-81F4-0757F91478CE"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00007:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1405236D-970D-4879-A98C-87693C758494"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00008:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07188547-C926-4937-87E9-23546E2EABFB"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00009:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74865A6E-42F5-4C8E-9159-63240AE55BAC"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00010:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC844BB8-F736-4DFD-9410-E45558F112B7"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00011:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4FB017B-3FE4-4272-AB5C-292F4833BD81"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00012:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5882F11D-D145-46D3-8740-D4336E34F323"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00013:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24AD241C-97F8-4F93-811C-99E707E2B0E6"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00014:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E363C64-EE85-4302-8D26-71B11D8B9B5C"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00015:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB9EB424-2545-4B57-8284-68AD0E57A92A"
            },
            {
              "criteria": "cpe:2.3:a:apache:lucene.net:4.8.0:beta00016:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8B783C0-35FD-433D-A597-3B2B3B5E190A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@apache.org"
}