FasterXML Jackson-databind CVE-2017-15095 Incomplete Fix Remote Code Execution Vulnerability

Bugtraq ID: 103880
Class: Design Error
CVE: CVE-2017-15095
Remote: Yes
Local: No
Published: Nov 02 2018 12:00AM
Updated: Nov 02 2018 12:00AM
Credit: Liao Xinxi (NSFOCUS)
Vulnerable: Redhat Software Collections 1 for RHEL 7 0
Redhat Software Collections 1 for RHEL 7.4
Redhat Software Collections 1 for RHEL 7.3
Redhat Redhat JBoss Enterprise Application Platform (for RHEL 7) 7.1
Redhat Redhat JBoss Enterprise Application Platform (for RHEL 6) 7.1
Redhat JBoss Middleware Text-Only Advisories for MIDDLEWARE 0
Redhat JBoss Enterprise Application Platform Text-Only Advisories 0
Redhat Developer Tools (for RHEL Workstation) 1
Redhat Developer Tools (for RHEL Server) 1
Oracle WebCenter Portal 12.2.1.3.0
Oracle WebCenter Portal 12.2.1.2.0
Oracle Retail Xstore Point of Service 16.0.3
Oracle Retail Xstore Point of Service 15.0.2
Oracle Retail Xstore Point of Service 7.1.7
Oracle Retail Xstore Point of Service 7.0.7
Oracle Retail Xstore Point of Service 6.5.12
Oracle Retail Order Broker 5.2
Oracle Primavera Unifier 17.0
Oracle Primavera Unifier 16.2
Oracle Primavera Unifier 16.1
Oracle Primavera Unifier 16.0
Oracle JD Edwards EnterpriseOne Tools 9.2.2
Oracle Enterprise Manager for Virtualization 13.2
Oracle Communications Contacts Server 8.0
Oracle Communications Calendar Server 8.0
Oracle Banking Platform 2.6
Oracle Banking Platform 2.5
Oracle Banking Platform 2.4
Oracle Banking Enterprise Product Manufacturing 2.6
Oracle Banking Enterprise Originations 2.6
Oracle Banking Enterprise Collections 2.6
Oracle Agile PLM Framework 9.3.6
FasterXML jackson-databind 2.9
FasterXML jackson-databind 2.8.9
FasterXML jackson-databind 2.8.8
FasterXML jackson-databind 2.8.7
FasterXML jackson-databind 2.8.8.1
FasterXML jackson-databind 2.7.9.1
FasterXML jackson-databind 2.6.7.1
Debian Linux 9.0
Debian Linux 8.0
Not Vulnerable: Redhat Software Collections for RHEL 7.4 EUS
Redhat Software Collections for RHEL 7.3 EUS
Redhat Software Collections for RHEL 7
FasterXML jackson-databind 2.9.2
FasterXML jackson-databind 2.9.1
FasterXML jackson-databind 2.8.10


 

Privacy Statement
Copyright 2010, SecurityFocus