CVE-2018-14718

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-502

Affected Products (58)

fasterxml · jackson-databind (up to 2.6.7.3)vulnerable

fasterxml · jackson-databind (up to 2.7.9.5)vulnerable

fasterxml · jackson-databind (up to 2.8.11.3)vulnerable

fasterxml · jackson-databind (up to 2.9.7)vulnerable

debian · debian_linuxvulnerable

oracle · banking_platformvulnerable

oracle · business_process_management_suitevulnerable

oracle · communications_billing_and_revenue_managementvulnerable

oracle · communications_instant_messaging_servervulnerable

oracle · enterprise_manager_for_virtualizationvulnerable

oracle · financial_services_analytical_applications_infrastructurevulnerable

oracle · global_lifecycle_management_opatch (up to 11.2.0.3.23)vulnerable

oracle · global_lifecycle_management_opatch (up to 12.2.0.1.19)vulnerable

oracle · global_lifecycle_management_opatch (up to 13.9.4.2.1)vulnerable

oracle · jd_edwards_enterpriseone_orchestratorvulnerable

oracle · jd_edwards_enterpriseone_toolsvulnerable

oracle · jdevelopervulnerable

oracle · nosql_database (up to 19.3.12)vulnerable

oracle · nosql_databasevulnerable

oracle · primavera_p6_enterprise_project_portfolio_managementvulnerable

oracle · primavera_unifiervulnerable

oracle · retail_customer_management_and_segmentation_foundationvulnerable

oracle · retail_merchandising_systemvulnerable

oracle · retail_workforce_management_softwarevulnerable

oracle · siebel_engineering_-_installer_\&_deploymentvulnerable

oracle · siebel_ui_frameworkvulnerable

oracle · webcenter_portalvulnerable

...and 8 more

References (20)

http://www.securityfocus.com/bid/106601

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHBA-2019:0959

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0782

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0877

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1782

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1797

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1822

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1823

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2804

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2858

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3002

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3140

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3149

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3892

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:4037

Third Party Advisory

https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44

PatchThird Party Advisory

https://github.com/FasterXML/jackson-databind/issues/2097

PatchThird Party Advisory

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7

PatchRelease NotesThird Party Advisory

https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286%40%3Cdev.lucene.apache.org%3E