CVE:CVE-2019-14439
CNNVD:CNNVD-201907-1500
FasterXML Jackson是美国FasterXML公司的一款适用于Java的数据处理工具。jackson-databind是其中的一个具有数据绑定功能的组件。
FasterXML jackson-databind 2.9.9.2之前的2.x版本中存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.7.9.5,2.8.11.3,2.9.9.2,and avoid the version [2.7.0,2.7.9.5],[2.8.0,2.8.11.3],[2.9.0,2.9.9.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30; Upgrade apache drill to a higher version than 1.16.0,and avoid the version 1.16.0; Upgrade redhat jboss_middleware_text-only_advisories to a higher version than 1.0,and avoid the version 1.0; Upgrade oracle banking_platform to a higher version than 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.7.0,2.7.1,and avoid the version 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.7.0,2.7.1; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.0.0,8.1,8.2,8.2.1,and avoid the version 8.0.0,8.1,8.2,8.2.1; Upgrade oracle communications_instant_messaging_server to a higher version than 10.0.1.3.0,and avoid the version 10.0.1.3.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.8,and avoid the version [8.0.2,8.0.8]; Upgrade oracle global_lifecycle_management_opatch to a higher version than 11.2.0.3.23,12.2.0.1.19,13.9.4.2.1,11.2.0.3.23,13.9.4.2.1,and avoid the version (,11.2.0.3.23),[12.2.0.1.0,12.2.0.1.19),[13.9.4.0.0,13.9.4.2.1),11.2.0.3.23,13.9.4.2.1; Upgrade oracle goldengate_stream_analytics to a higher version than 19.1.0.0.1,and avoid the version (,19.1.0.0.1); Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle primavera_gateway to a higher version than 17.12,15.2,16.1,16.2,18.8.0,and avoid the version [17.7,17.12],15.2,16.1,16.2,18.8.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 17.0,and avoid the version 17.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,15.0,16.0,17.0,18.0,and avoid the version 7.1,15.0,16.0,17.0,18.0; Upgrade oracle siebel_engineering_-_installer_&_deployment to a higher version than 19.8,and avoid the version (,19.8]; Upgrade oracle siebel_ui_framework to a higher version than 19.10,and avoid the version (,19.10]