CVE:CVE-2019-16335
CNNVD:CNNVD-201909-715
FasterXML Jackson是美国FasterXML公司的一款适用于Java的数据处理工具。jackson-databind是其中的一个具有数据绑定功能的组件。
FasterXML jackson-databind 2.9.10之前版本中存在代码问题漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.6.7.3,2.8.11.5,2.9.10,and avoid the version [2.6.0,2.6.7.3),[2.8.0,2.8.11.5),[2.9.0,2.9.10); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade netapp oncommand_api_services to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.2,7.3,and avoid the version 7.2,7.3; Upgrade oracle banking_platform to a higher version than 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.7.0,2.7.1,and avoid the version 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.7.0,2.7.1; Upgrade oracle customer_management_and_segmentation_foundation to a higher version than 18.0,and avoid the version 18.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.8,and avoid the version [8.0.2,8.0.8]; Upgrade oracle global_lifecycle_management_opatch to a higher version than 11.2.0.3.23,12.2.0.1.19,13.9.4.2.1,and avoid the version (,11.2.0.3.23),[12.2.0.1.0,12.2.0.1.19),[13.9.4.0.0,13.9.4.2.1); Upgrade oracle goldengate_application_adapters to a higher version than 19.1.0.0.0,and avoid the version 19.1.0.0.0; Upgrade oracle goldengate_stream_analytics to a higher version than 19.1.0.0.1,and avoid the version (,19.1.0.0.1); Upgrade oracle primavera_gateway to a higher version than 17.12,15.2,16.1,16.2,18.8.0,and avoid the version [17.7,17.12],15.2,16.1,16.2,18.8.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 17.0,and avoid the version 17.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 7.1,15.0,16.0,17.0,18.0,and avoid the version 7.1,15.0,16.0,17.0,18.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0