CVE:CVE-2018-1257
CNNVD:CNNVD-201805-405
Pivotal Spring Framework是美国Pivotal Software公司的一套开源的Java、Java EE应用程序框架。该框架可帮助开发人员构建高质量的应用。
Pivotal Spring Framework 5.0.6之前的5.0.x版本、4.3.17之前的4.3.x版本及已不再支持的老版本中存在安全漏洞。攻击者可通过构建消息利用该漏洞造成拒绝服务。
solution:Upgrade vmware spring_framework to a higher version than 4.3.17,5.0.6,and avoid the version (,4.3.17),[5.0.0,5.0.6); Upgrade redhat openshift to a higher version than -; Upgrade oracle agile_product_lifecycle_management to a higher version than 9.3.3,9.3.4,9.3.5,9.3.6,and avoid the version 9.3.3,9.3.4,9.3.5,9.3.6; Upgrade oracle application_testing_suite to a higher version than 12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1,and avoid the version 12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1; Upgrade oracle big_data_discovery to a higher version than 1.6.0,and avoid the version 1.6.0; Upgrade oracle communications_converged_application_server to a higher version than 7.0.0.1,and avoid the version (,7.0.0.1); Upgrade oracle communications_diameter_signaling_router to a higher version than 8.3,and avoid the version (,8.3); Upgrade oracle communications_performance_intelligence_center to a higher version than 10.2.1,and avoid the version (,10.2.1); Upgrade oracle communications_services_gatekeeper to a higher version than 6.1.0.4.0,and avoid the version (,6.1.0.4.0); Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.2,7.3.4,7.3.5,7.4.0,and avoid the version 7.3.2,7.3.4,7.3.5,7.4.0; Upgrade oracle endeca_information_discovery_integrator to a higher version than 3.1.0,3.2.0,and avoid the version 3.1.0,3.2.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0,and avoid the version 12.1.0.5.0,13.2.0.0.0,13.3.0.0.0; Upgrade oracle enterprise_manager_for_mysql_database to a higher version than 13.2,and avoid the version 13.2; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,and avoid the version 12.3.3; Upgrade oracle flexcube_private_banking to a higher version than 2.0.0.0,2.2.0.1,12.0.1.0,12.0.3.0,12.1.0.0,and avoid the version 2.0.0.0,2.2.0.1,12.0.1.0,12.0.3.0,12.1.0.0; Upgrade oracle goldengate_for_big_data to a higher version than 12.2.0.1,12.3.1.1,12.3.2.1,and avoid the version 12.2.0.1,12.3.1.1,12.3.2.1; Upgrade oracle health_sciences_information_manager to a higher version than 3.0,and avoid the version 3.0; Upgrade oracle healthcare_master_person_index to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle insurance_calculation_engine to a higher version than 10.1.1,10.2,10.2.1,and avoid the version 10.1.1,10.2,10.2.1; Upgrade oracle insurance_rules_palette to a higher version than 10.0,10.1,10.2,11.0,11.1,and avoid the version 10.0,10.1,10.2,11.0,11.1; Upgrade oracle primavera_gateway to a higher version than 15.2,16.2,17.12,and avoid the version 15.2,16.2,17.12; Upgrade oracle retail_customer_insights to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_open_commerce_platform to a higher version than 5.3.0,6.0.0,6.0.1,and avoid the version 5.3.0,6.0.0,6.0.1; Upgrade oracle retail_order_broker to a higher version than 5.1,5.2,15.0,16.0,and avoid the version 5.1,5.2,15.0,16.0; Upgrade oracle retail_predictive_application_server to a higher version than 14.0,14.1,15.0,16.0,and avoid the version 14.0,14.1,15.0,16.0; Upgrade oracle service_architecture_leveraging_tuxedo to a higher version than 12.1.3.0.0,12.2.2.0.0,and avoid the version 12.1.3.0.0,12.2.2.0.0; Upgrade oracle tape_library_acsls to a higher version than 8.4,and avoid the version 8.4; Upgrade oracle utilities_network_management_system to a higher version than 1.12.0.3,and avoid the version 1.12.0.3; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0