CVE-2017-12629
critical
CVSS v3
9.8
CVSS v4 NEW
—
VIR risk
10.0
Description
Remote code execution occurs in Apache Solr
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
Apache Solr 7.0.1 - XML External Entity Expansion / Remote Code Execution
Source code queued for fetch — refresh in a moment.
OS impact
Ubuntu Affected 1 release
| Version | Status | Fixed in |
|---|---|---|
| 16.04 | Affected | — |
Debian Mixed 8 releases
| Version | Status | Fixed in |
|---|---|---|
| trixie | Fixed | 3.6.2+dfsg-11 |
| sid | Fixed | 3.6.2+dfsg-11 |
| forky | Fixed | 3.6.2+dfsg-11 |
| bullseye | Fixed | 3.6.2+dfsg-11 |
| bookworm | Fixed | 3.6.2+dfsg-11 |
| 9.0 | Affected | — |
| 8.0 | Affected | — |
| 7.0 | Affected | — |
Red Hat Fixed 2 releases
| Version | Status | Fixed in |
|---|---|---|
| 7.0 | Not affected | — |
| 6.0 | Not affected | — |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.apache.solr:solr-core | >=7.0.0,<7.1.0 | 7.1.0 |
| Maven | org.apache.solr:solr-core | >=6.0.0,<6.6.2 | 6.6.2 |
| Maven | org.apache.solr:solr-core | >=5.5.0,<5.5.5 | 5.5.5 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| apache | solr | {"startIncluding":"5.5.0","endIncluding":"5.5.4"} | |
| redhat | jboss_enterprise_application_platform | 7.0.0 | |
| redhat | jboss_enterprise_application_platform | 7.1.0 | |
References
- http://mail-archives.us.apache.org/mod_mbox/www-announce/201710.mbox/%3CCAOOKt51UO_6Vy%3Dj8W%3Dx1pMbLW9VJfZyFWz7pAnXJC_OAdSZubA%40mail.gmail.com%3E
- http://openwall.com/lists/oss-security/2017/10/13/1
- http://www.securityfocus.com/bid/101261
- https://access.redhat.com/errata/RHSA-2017:3123
- https://access.redhat.com/errata/RHSA-2017:3124
- https://access.redhat.com/errata/RHSA-2017:3244
- https://access.redhat.com/errata/RHSA-2017:3451
- https://access.redhat.com/errata/RHSA-2017:3452
- https://access.redhat.com/errata/RHSA-2018:0002
- https://access.redhat.com/errata/RHSA-2018:0003
- https://access.redhat.com/errata/RHSA-2018:0004
- https://access.redhat.com/errata/RHSA-2018:0005
- https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E
- https://lists.apache.org/thread.html/r26c996b068ef6c5e89aa59acb769025cfd343a08e63fbe9e7f3f720f%40%3Coak-issues.jackrabbit.apache.org%3E
- https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E
- https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2018/01/msg00028.html
- https://s.apache.org/FJDl
- https://twitter.com/ApacheSolr/status/918731485611401216
- https://twitter.com/joshbressers/status/919258716297420802
- https://twitter.com/searchtools_avi/status/918904813613543424
- https://usn.ubuntu.com/4259-1/
- https://www.debian.org/security/2018/dsa-4124
- https://www.exploit-db.com/exploits/43009/
- https://nvd.nist.gov/vuln/detail/CVE-2017-12629
CWEs
CWE-611
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.