CVE:CVE-2020-36518
CNNVD:CNNVD-202203-1165
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.13.0之前版本中存在安全漏洞，该漏洞源于软件中存在Java的栈溢出异常，攻击者可以通过大量嵌套对象利用该漏洞实现拒绝服务攻击。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.12.6.1,2.13.2.1,and avoid the version (,2.12.6.1),[2.13.0,2.13.2.1); Upgrade oracle big_data_spatial_and_graph to a higher version than 23.1,and avoid the version (,23.1); Upgrade oracle coherence to a higher version than 14.1.1.0.0,and avoid the version 14.1.1.0.0; Upgrade oracle commerce_platform to a higher version than 11.3.0,11.3.1,11.3.2,and avoid the version 11.3.0,11.3.1,11.3.2; Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.6.0,and avoid the version [12.0.0.4.0,12.0.0.6.0]; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.3,and avoid the version 22.1.3; Upgrade oracle communications_cloud_native_core_console to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 22.1.2,22.2.0,and avoid the version 22.1.2,22.2.0; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 22.1.0,22.1.1,and avoid the version 22.1.0,22.1.1; Upgrade oracle communications_cloud_native_core_security_edge_protection_proxy to a higher version than 22.1.1,and avoid the version 22.1.1; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.0.0,8.1.1.0,8.1.2.0,8.1.2.1,and avoid the version [8.0.7,8.1.0.0],8.1.1.0,8.1.2.0,8.1.2.1; Upgrade oracle financial_services_behavior_detection_platform to a higher version than 8.1.2.1,8.0.7.0.0,8.0.8,and avoid the version [8.1.1.0,8.1.2.1],8.0.7.0.0,8.0.8; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle financial_services_enterprise_case_management to a higher version than 8.1.2.1,8.0.7.1,8.0.7.2,8.0.8.0,8.0.8.1,and avoid the version [8.1.1.0,8.1.2.1],8.0.7.1,8.0.7.2,8.0.8.0,8.0.8.1; Upgrade oracle financial_services_trade-based_anti_money_laundering to a higher version than 8.0.7,8.0.8,and avoid the version 8.0.7,8.0.8; Upgrade oracle global_lifecycle_management_nextgen_oui_framework to a higher version than 13.9.4.2.2,13.9.4.2.2,and avoid the version (,13.9.4.2.2),13.9.4.2.2; Upgrade oracle global_lifecycle_management_opatch to a higher version than 12.2.0.1.30,and avoid the version (,12.2.0.1.30); Upgrade oracle graph_server_and_client to a higher version than 22.2.0,and avoid the version (,22.2.0); Upgrade oracle health_sciences_empirica_signal to a higher version than 9.1.0.5.2,and avoid the version 9.1.0.5.2; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,8.59,and avoid the version 8.58,8.59; Upgrade oracle primavera_gateway to a higher version than 17.12.11,18.8.14,19.12.13,20.12.18,21.12.1,and avoid the version [17.12.0,17.12.11],[18.8.0,18.8.14],[19.12.0,19.12.13],[20.12.0,20.12.18],[21.12.0,21.12.1]; Upgrade oracle primavera_p6_enterprise_project_portfolio_management to a higher version than 17.12.20.4,18.8.25.4,19.12.19.0,21.12.4.0,and avoid the version [17.12.0.0,17.12.20.4],[18.8.0.0,18.8.25.4],[19.12.0,19.12.19.0],[20.12.0.0,21.12.4.0]; Upgrade oracle primavera_unifier to a higher version than 17.12,18.0,19.12,20.12,21.12,and avoid the version [17.0,17.12],18.0,19.12,20.12,21.12; Upgrade oracle retail_sales_audit to a higher version than 15.0.3.1,and avoid the version 15.0.3.1; Upgrade oracle sd-wan_edge to a higher version than 9.0,9.1,and avoid the version 9.0,9.1; Upgrade oracle spatial_studio to a higher version than 20.1.0,and avoid the version (,20.1.0); Upgrade oracle utilities_framework to a higher version than 4.3.0.5.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,4.4.0.5.0,and avoid the version 4.3.0.5.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,4.4.0.5.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_insights_acquisition_unit to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snap_creator_framework to a higher version than -