CVE-2017-1000355

Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an XStream: Java crash when trying to instantiate void/Void.

• CWE-502

• http://www.securityfocus.com/bid/98066Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-04-26/Vendor Advisory
• http://www.securityfocus.com/bid/98066Third Party Advisory, VDB Entry
• https://jenkins.io/security/advisory/2017-04-26/Vendor Advisory

Published

Jan 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000255On Linux running on PowerPC hardware (Power8 or later) a use…
• CVE-2017-1000256libvirt version 2.3.0 and later is vulnerable to a bad defau…8.1
• CVE-2017-1000257An IMAP FETCH response line indicates the size of the return…9.1
• CVE-2017-10003Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2017-1000353Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …9.8
• CVE-2017-1000354Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …
• CVE-2017-1000356Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and …
• CVE-2017-1000357Denial of Service attack when the switch rejects to receive …
• CVE-2017-1000358Controller throws an exception and does not allow user to ad…
• CVE-2017-1000359Java out of memory error and significant increase in resourc…
• CVE-2017-1000360StreamCorruptedException and NullPointerException in OpenDay…
• CVE-2017-1000361DOMRpcImplementationNotAvailableException when sending Port-…