| Release | Version |
|---|---|
| jessie | 2.11-2+deb8u1 |
| stretch | 2.13-2 |
| buster | 2.13-4 |
| bullseye | 2.13-4 |
| bookworm | 2.13-5 |
| sid | 2.13-5 |
| Bug | jessie | stretch | buster | bullseye | bookworm | sid | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-0187 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | Unauthenticated RCE is possible when JMeter is used in distributed mod ... |
| CVE-2018-1297 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable | When using Distributed Test only (RMI based), Apache JMeter 2.x and 3. ... |
| CVE-2018-1287 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | In Apache JMeter 2.X and 3.X, when using Distributed Test only (RMI ba ... |