CVE-2018-7489

Published: Feb 26, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.

Affected (10)

Products: Fasterxml: Jackson Databind · Debian: Debian Linux · Oracle: Communications Billing And Revenue Management, Communications Instant Messaging Server · +1 more

Show all products

Fasterxml: Jackson Databind · Debian: Debian Linux · Oracle: Communications Billing And Revenue Management, Communications Instant Messaging Server · Redhat: Jboss Enterprise Application Platform

1 product

1 product

2 products

Communications Billing And Revenue Management

Communications Instant Messaging Server

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fasterxml Jackson Databind	Before 2.7.9.3
Fasterxml Jackson Databind	From 2.8.0 to 2.8.11.1
Fasterxml Jackson Databind	From 2.9.0 to 2.9.5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Billing And Revenue Management	Version 12.0
Oracle Communications Billing And Revenue Management	Version 7.5
Oracle Communications Instant Messaging Server	Version 10.0.1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 6.4.19
Redhat Jboss Enterprise Application Platform	Version 7.1.2

Related CWEs

CWE-184

Incomplete List of Disallowed Inputs

The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses.

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (56)

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: cve@mitre.org

Patch

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Source: cve@mitre.org

Patch

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/103203

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040693

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041890

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:1447

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1448

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1449

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1450

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1451

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1786

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2088

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2089

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2090

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2938

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2939

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2858

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:3149

Source: cve@mitre.org

https://github.com/FasterXML/jackson-databind/issues/1931

Source: cve@mitre.org

Third Party Advisory

https://lists.apache.org/thread.html/r1d4a247329a8478073163567bbc8c8cb6b49c6bfc2bf58153a857af1%40%3Ccommits.druid.apache.org%3E

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20180328-0001/

Source: cve@mitre.org

Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03902en_us

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2018/dsa-4190

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: cve@mitre.org

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Source: cve@mitre.org

Patch

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html