CVE:CVE-2018-8088
CNNVD:CNNVD-201803-708
SLF4J是开源的一个库，充当各种日志框架（例如 java.util.logging、logback、log4j）的简单外观或抽象。
SLF4J 1.8.0-beta2之前版本中的slf4j-ext模块的org.slf4j.ext.EventData存在代码问题漏洞。远程攻击者可借助特制的数据利用该漏洞绕过访问限制。
solution:Upgrade qos slf4j to a higher version than 1.7.26,1.8.0:alpha1,1.8.0:alpha2,1.8.0:beta1,1.8.0:beta2,and avoid the version (,1.7.26),1.8.0:alpha1,1.8.0:alpha2,1.8.0:beta1,1.8.0:beta2; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.1,6.0.0,6.4.0,and avoid the version 7.1,6.0.0,6.4.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle goldengate_application_adapters to a higher version than 12.3.2.1.0,and avoid the version 12.3.2.1.0; Upgrade oracle goldengate_stream_analytics to a higher version than 19.1.0.0.1,and avoid the version (,19.1.0.0.1); Upgrade oracle utilities_framework to a higher version than 4.2.0.2.0,4.2.0.3.0,4.3.0.2.0,4.3.0.3.0,4.3.0.4.0,4.3.0.5.0,4.3.0.6.0,4.4.0.0.0,and avoid the version 4.2.0.2.0,4.2.0.3.0,4.3.0.2.0,4.3.0.3.0,4.3.0.4.0,4.3.0.5.0,4.3.0.6.0,4.4.0.0.0