CVE:CVE-2018-1000613
CNNVD:CNNVD-201807-476
Legion of the Bouncy Castle Java Cryptography APIs是一款轻量级加密API。
Legion of the Bouncy Castle Java Cryptography APIs 1.60之前版本中的XMSS/XMSS^MT私钥反序列化存在安全漏洞。攻击者可借助特制的私钥利用该漏洞执行代码。
solution:Upgrade bouncycastle legion-of-the-bouncy-castle-java-crytography-api to a higher version than 1.60,and avoid the version [1.58,1.60); Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle api_gateway to a higher version than 11.1.2.4.0,and avoid the version 11.1.2.4.0; Upgrade oracle banking_platform to a higher version than 2.6.0,2.6.1,2.6.2,and avoid the version 2.6.0,2.6.1,2.6.2; Upgrade oracle business_process_management_suite to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle business_transaction_management to a higher version than 12.1.0,and avoid the version 12.1.0; Upgrade oracle communications_application_session_controller to a higher version than 3.7.1,3.8.0,and avoid the version 3.7.1,3.8.0; Upgrade oracle communications_converged_application_server to a higher version than 7.0.0.1,7.0.0.1,and avoid the version (,7.0.0.1),7.0.0.1; Upgrade oracle communications_convergence to a higher version than 3.0.2,and avoid the version 3.0.2; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.0.0,8.1,8.2,8.2.1,and avoid the version 8.0.0,8.1,8.2,8.2.1; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,7.2,and avoid the version (,7.2),7.2; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0,13.3.0.0,and avoid the version 12.1.0.5.0,13.2.0.0,13.3.0.0; Upgrade oracle enterprise_manager_for_fusion_middleware to a higher version than 13.2.0.0,13.3.0.0,and avoid the version 13.2.0.0,13.3.0.0; Upgrade oracle enterprise_repository to a higher version than 11.1.1.7.0,12.1.3.0.0,and avoid the version 11.1.1.7.0,12.1.3.0.0; Upgrade oracle managed_file_transfer to a higher version than 12.1.3.0.0,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3.0; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle retail_convenience_and_fuel_pos_software to a higher version than 2.8.1,and avoid the version 2.8.1; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade oracle soa_suite to a higher version than 12.1.3.0.0,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3.0; Upgrade oracle utilities_network_management_system to a higher version than 1.12.0.3,2.3.0.0,2.3.0.1,2.3.0.2,and avoid the version 1.12.0.3,2.3.0.0,2.3.0.1,2.3.0.2; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.2.1.3.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3,and avoid the version 12.2.1.3