CVE:CVE-2017-7525
CNNVD:CNNVD-201707-1181
FasterXML Jackson是美国FasterXML公司的一款适用于Java的数据处理工具。jackson-databind是其中的一个具有数据绑定功能的组件。
FasterXML jackson-databind 2.6.7.1之前版本、2.7.9.1版本和2.8.9版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.1,2.7.9.1,2.8.9,2.9.0:prerelease1,2.9.0:prerelease2,and avoid the version (,2.6.7.1),[2.7.0,2.7.9.1),[2.8.0,2.8.9),2.9.0:prerelease1,2.9.0:prerelease2; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp oncommand_balance to a higher version than -; Upgrade netapp oncommand_performance_manager to a higher version than -; Upgrade netapp oncommand_shift to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade redhat openshift_container_platform to a higher version than 4.1,3.11,and avoid the version 4.1,3.11; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.0.0,6.4.0,7.0,7.1,and avoid the version 6.0.0,6.4.0,7.0,7.1; Upgrade oracle banking_platform to a higher version than 2.5.0,2.6.0,2.6.1,2.6.2,and avoid the version 2.5.0,2.6.0,2.6.1,2.6.2; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5,12.0,and avoid the version 7.5,12.0; Upgrade oracle communications_communications_policy_management to a higher version than 12.5.2,and avoid the version [12.0,12.5.2]; Upgrade oracle communications_diameter_signaling_route to a higher version than 8.3,and avoid the version (,8.3); Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1,10.0.1.2.0,and avoid the version 10.0.1,10.0.1.2.0; Upgrade oracle enterprise_manager_for_virtualization to a higher version than 13.2.2,13.2.3,13.3.1,and avoid the version 13.2.2,13.2.3,13.3.1; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.2.0.0,8.0.3.0.0,8.0.4.0.0,8.0.5.0.0,8.0.6.0.0,8.0.7.0.0,and avoid the version 8.0.2.0.0,8.0.3.0.0,8.0.4.0.0,8.0.5.0.0,8.0.6.0.0,8.0.7.0.0; Upgrade oracle global_lifecycle_management_opatchauto to a higher version than 12.2.0.1.14,and avoid the version (,12.2.0.1.14); Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,and avoid the version [17.1,17.12],16.1,16.2,18.8; Upgrade oracle utilities_advanced_spatial_and_operational_analytics to a higher version than 2.7.0.1,and avoid the version 2.7.0.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0