Vulnerability CVE-2018-14718

Vulnerability CVE-2018-14718

Published: 2019-01-02

Description:

Type:

(Deserialization of Untrusted Data)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Affected software
Oracle -> Banking platform
Oracle -> Communications billing and revenue management
Oracle -> Enterprise manager for virtualization
Oracle -> Financial services analytical applications infrastructure
Oracle -> Primavera unifier
Oracle -> Webcenter portal
Oracle -> Jdeveloper
Oracle -> Retail merchandising system
Fasterxml -> Jackson-databind
Debian -> Debian linux

http://www.securityfocus.com/bid/106601

https://access.redhat.com/errata/RHBA-2019:0959

https://access.redhat.com/errata/RHSA-2019:0782

https://access.redhat.com/errata/RHSA-2019:0877

https://github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44

https://github.com/FasterXML/jackson-databind/issues/2097

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.7

https://lists.apache.org/thread.html/6a78f88716c3c57aa74ec05764a37ab3874769a347805903b393b286@%3Cdev.lucene.apache.org%3E

https://lists.apache.org/thread.html/82b01bfb6787097427ce97cec6a7127e93718bc05d1efd5eaffc228f@%3Cdev.lucene.apache.org%3E

https://lists.apache.org/thread.html/ba973114605d936be276ee6ce09dfbdbf78aa56f6cdc6e79bfa7b8df@%3Cdev.lucene.apache.org%3E

https://lists.debian.org/debian-lts-announce/2019/03/msg00005.html

https://seclists.org/bugtraq/2019/May/68

https://security.netapp.com/advisory/ntap-20190530-0003/

https://www.debian.org/security/2019/dsa-4452

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html