CVE-2018-2620

概要

参考情報

• oracle.com/technetwork/security-advisory/cpujan2018-3236628.html · Patch
• securityfocus.com/bid/102583 · Third Party Advisory
• securitytracker.com/id/1040213 · Third Party Advisory

primavera unifier のその他の脆弱性

• CVE-2022-30126中 5.5In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of ser…
• CVE-2022-25169中 5.5The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
• CVE-2020-36518高 7.5jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
• CVE-2021-44832中 6.6Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution…
• CVE-2021-45105中 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referent…