CVE-2018-8088

Опубликовано: 20 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

Ссылки

http://www.securityfocus.com/bid/103737
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040627
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0582
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0592
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0627
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0628
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0629
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:0630
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1247
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1248
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1249
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1251
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1323
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1447
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1448
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1449
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1450
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1451
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1525
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1575
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qos:slf4j:*:*:*:*:*:*:*:*

Версия до 1.7.26 (исключая)

cpe:2.3:a:qos:slf4j:1.8.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:qos:slf4j:1.8.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:qos:slf4j:1.8.0:beta1:*:*:*:*:*:*

cpe:2.3:a:qos:slf4j:1.8.0:beta2:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*

Версия до 19.1.0.0.1 (исключая)

cpe:2.3:a:oracle:utilities_framework:4.2.0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.3.0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.3.0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.3.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00836

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8088

CVSS3: 9.8

ubuntu

больше 7 лет назад

CVE-2018-8088

CVSS3: 8.1

redhat

больше 7 лет назад

CVE-2018-8088

CVSS3: 9.8

debian

больше 7 лет назад

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before ...

openSUSE-SU-2018:1625-1

suse-cvrf

больше 7 лет назад

Security update for slf4j

SUSE-SU-2018:1744-1

suse-cvrf

больше 7 лет назад

Security update for slf4j

EPSS

Процентиль: 74%

0.00836

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo