Medium severity4.2NVD Advisory· Published Sep 11, 2018· Updated Jun 17, 2026
CVE-2016-0750
CVE-2016-0750
Description
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.infinispan:infinispan-coreMaven | < 9.1.0.Final | 9.1.0.Final |
Affected products
3<9.1.0.Final+ 1 more
- (no CPE)range: <9.1.0.Final
- cpe:2.3:a:infinispan:infinispan:*:*:*:*:*:*:*:*range: <9.1.0
- Range: 9.1.0.Final
Patches
Vulnerability mechanics
References
8- github.com/infinispan/infinispan/pull/5116nvdPatchVendor AdvisoryWEB
- www.securityfocus.com/bid/101910nvdThird Party AdvisoryVDB EntryWEB
- access.redhat.com/errata/RHSA-2017:3244nvdVendor AdvisoryWEB
- access.redhat.com/errata/RHSA-2018:0501nvdVendor AdvisoryWEB
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
- github.com/advisories/GHSA-4hhg-8ghq-vwq6ghsaADVISORY
- issues.jboss.org/browse/ISPN-7781nvdIssue TrackingThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2016-0750ghsaADVISORY
News mentions
0No linked articles in our index yet.