CVE:CVE-2019-5427
CNNVD:CNNVD-201904-1020
c3p0是一款支持高并发的开源JDBC连接池库。
c3p0 0.9.5.4之前版本中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade mchange c3p0 to a higher version than 0.9.5.2,and avoid the version (,0.9.5.2); Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade oracle communications_ip_service_activator to a higher version than 7.3.0,7.4.0,and avoid the version 7.3.0,7.4.0; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle documaker to a higher version than 12.6.6,and avoid the version [12.6.0,12.6.6]; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.2.1.0,and avoid the version 13.2.1.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.1.2.4,and avoid the version 11.1.2.4; Upgrade oracle retail_xstore_point_of_service to a higher version than 15.0,16.0,17.0,18.0,19.0,and avoid the version 15.0,16.0,17.0,18.0,19.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0