CVE:CVE-2019-17359
CNNVD:CNNVD-201910-389
Bouncy Castle Crypto是一款开源的加密库。
Bouncy Castle Crypto 1.63版本中的ASN.1解析器存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade bouncycastle legion-of-the-bouncy-castle-java-crytography-api to a higher version than 1.63,and avoid the version 1.63; Upgrade apache tomee to a higher version than 7.0.7,7.1.2,8.0.1,and avoid the version 7.0.7,7.1.2,8.0.1; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp service_level_manager to a higher version than -; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_convergence to a higher version than 3.0.2.1,and avoid the version [3.0.1.0,3.0.2.1]; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_session_route_manager to a higher version than 8.2.2,and avoid the version [8.2.0,8.2.2]; Upgrade oracle data_integrator to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.9,and avoid the version [8.0.6,8.0.9]; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,and avoid the version 4.2.0; Upgrade oracle managed_file_transfer to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle peoplesoft_enterprise_hcm_global_payroll_switzerland to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.56,8.57,8.58,and avoid the version 8.56,8.57,8.58; Upgrade oracle retail_xstore_point_of_service to a higher version than 18.0.1,and avoid the version 18.0.1; Upgrade oracle soa_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0