CVE-2020-36518

Опубликовано: 11 мар. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Ссылки

https://github.com/FasterXML/jackson-databind/issues/2816
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html
Exploit
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0004/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5283
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Third Party Advisory
https://github.com/FasterXML/jackson-databind/issues/2816
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html
Exploit
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220506-0004/
Third Party Advisory
https://www.debian.org/security/2022/dsa-5283
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

Версия до 2.12.6.1 (исключая)

cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*

Версия от 2.13.0 (включая) до 2.13.2.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:*

Версия до 23.1 (исключая)

cpe:2.3:a:oracle:coherence:14.1.1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:commerce_platform:11.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:commerce_platform:11.3.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_billing_and_revenue_management:*:*:*:*:*:*:*:*

Версия от 12.0.0.4.0 (включая) до 12.0.0.6.0 (включая)

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:22.1.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.1.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:22.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:22.1.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:22.1.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:22.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:22.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*

Версия от 8.0.7 (включая) до 8.1.0.0 (включая)

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_behavior_detection_platform:*:*:*:*:*:*:*:*

Версия от 8.1.1.0 (включая) до 8.1.2.1 (включая)

cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_enterprise_case_management:*:*:*:*:*:*:*:*

Версия от 8.1.1.0 (включая) до 8.1.2.1 (включая)

cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.7:*:*:*:enterprise:*:*:*

cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.8:*:*:*:enterprise:*:*:*

cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:*:*:*:*:*:*:*:*

Версия до 13.9.4.2.2 (исключая)

cpe:2.3:a:oracle:global_lifecycle_management_nextgen_oui_framework:13.9.4.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*

Версия до 12.2.0.1.30 (исключая)

cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*

Версия до 22.2.0 (исключая)

cpe:2.3:a:oracle:health_sciences_empirica_signal:9.1.0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*