High severity8.1NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-1000034

Description

Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.typesafe.akka:akka-actorMaven	< 2.4.17	2.4.17

Affected products

Akka/Akka Core2 versions
cpe:2.3:a:akka:akka:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:akka:akka:*:*:*:*:*:*:*:*range: <=2.4.16
- cpe:2.3:a:akka:akka:2.5:m1:*:*:*:*:*:*
ghsa-coords
pkg:maven/com.typesafe.akka/akka-actor
Range: < 2.4.17

Patches

Vulnerability mechanics

References

doc.akka.io/docs/akka/2.4/security/2017-02-10-java-serialization.htmlnvdVendor AdvisoryWEB
github.com/advisories/GHSA-mm57-9j6q-rxm2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-1000034ghsaADVISORY
github.com/akka/akka/commit/cc6561b47e5958923df520b8a9514010d3e11d49ghsaWEB
github.com/akka/akka/issues/22283ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.005
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000