CVE-2017-10234

概要

参考情報

• oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Patch
• securityfocus.com/bid/99859 · Third Party Advisory
• securitytracker.com/id/1038937 · Third Party Advisory

solaris cluster のその他の脆弱性

• CVE-2020-6950中 6.5Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
• CVE-2021-29425中 4.8In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\f…
• CVE-2019-17195緊急 9.8Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash…
• CVE-2019-10086高 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access…
• CVE-2018-2930緊急 9.8Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). Supported versions …