VDB
BDU%3A2018-00961
BDU%3A2018-00961
PUBLISHED
CVSS 7.5 HIGH
Уязвимость библиотеки для работы с SVG-изображениями Apache Batik, связанная с восстановлением в памяти недостоверной структуры данных, позволяющая нарушителю получить доступ к защищаемым данным или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Сообщество свободного программного обеспечения, Oracle Corp., Apache Software Foundation | Ubuntu, Debian GNU/Linux, JD Edwards EnterpriseOne Tools, Batik, Communications Diameter Signaling Router, Communications WebRTC Session Controller, Communications Application Session Controller, Oracle Data Integrator, Insurance Policy Administration J2EE, Retail Integration Bus, Fusion Middleware MapViewer, Financial Services Analytical Applications Infrastructure |
Timeline
- Aug 10, 2018 CVE Published
- Mar 23, 2021 CVE Updated
- Mar 18, 2026 Distribution Patch
References
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html url
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html url
- https://www.debian.org/security/2018/dsa-4215 url
- https://usn.ubuntu.com/3661-1/ url
- https://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-dev/201805.mbox/%3c000701d3f28f$d01860a0$704921e0$@gmail.com%3e url
- https://xmlgraphics.apache.org/security.html advisory
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html advisory