CVE:CVE-2018-5968
CNNVD:CNNVD-201801-860
FasterXML jackson-databind是一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML Jackson-databind 2.8.11及之前版本和2.9.x版本至2.9.3版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.3,2.7.9.2,2.8.11.1,2.9.4,and avoid the version [2.6.0,2.6.7.3),[2.7.0,2.7.9.2),[2.8.0,2.8.11.1),[2.9.0,2.9.4); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat openshift_container_platform to a higher version than 4.1,3.11,and avoid the version 4.1,3.11; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.1,and avoid the version 7.1; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.60.3,and avoid the version [11.0.0,11.60.3]; Upgrade netapp e-series_santricity_web_services_proxy to a higher version than -; Upgrade netapp oncommand_shift to a higher version than -