CVE:CVE-2018-1517
CNNVD:CNNVD-201808-581
IBM SDK, Java Technology Edition是美国IBM公司的一款用于Java应用程序开发的软件开发工具包。
IBM SDK, Java Technology Edition 6.0版本、7.0版本和8.0版本中的java.math组件存在输入验证错误漏洞。攻击者可借助特制的String数据利用该漏洞造成拒绝服务。
solution:Upgrade ibm software_development_kit to a higher version than 6:service_refresh_16,6.0,6r1:service_refresh_8,7:service_refresh_10,7.0,7r1:service_refresh_4,8:service_refresh_5,8.0,and avoid the version 6:service_refresh_16,6.0,6r1:service_refresh_8,7:service_refresh_10,7.0,7r1:service_refresh_4,8:service_refresh_5,8.0; Upgrade redhat satellite to a higher version than 5.6,5.7,5.8,and avoid the version 5.6,5.7,5.8; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0