CVE:CVE-2022-25647
CNNVD:CNNVD-202205-1791
gson是一个 Java 库，可用于将 Java 对象转换为其 JSON 表示形式。
com.google.code.gson:gson 2.8.9之前版本存在安全漏洞，该漏洞源于writeReplace()方法反序列化不受信任的数据，可导致DoS攻击。
solution:Upgrade google gson to a higher version than 2.8.9,and avoid the version [2.2.3,2.8.9); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade oracle financial_services_crime_and_compliance_management_studio to a higher version than 8.0.8.2.0,8.0.8.3.0,and avoid the version 8.0.8.2.0,8.0.8.3.0; Upgrade oracle graalvm to a higher version than 20.3.6,21.3.2,22.1.0,and avoid the version 20.3.6,21.3.2,22.1.0; Upgrade oracle retail_order_broker to a higher version than 18.0,19.1,and avoid the version 18.0,19.1