VDB
BDU%3A2020-01665
BDU%3A2020-01665
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции ConfigXmlUtils библиотеки работы с JDBC-драйверами c3p0, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Fedora Project, Red Hat Inc., Сообщество свободного программного обеспечения, АО "НППКТ" | Retail Returns Management, Retail Point-of-Service, Fusion Middleware MapViewer, Primavera Unifier, Fedora, Oracle Retail Order Broker, Enterprise Manager Ops Center, Retail Customer Management and Segmentation Foundation, Retail Xstore Point of Service, Oracle Communications IP Service Activator, Retail Integration Bus, Red Hat Fuse, c3p0, Oracle Banking Enterprise Originations, Oracle FLEXCUBE Investor Servicing, Oracle FLEXCUBE Private Banking, Oracle Communications Session Route Manager, Enterprise Manager Base Platform, Hyperion Infrastructure Technology, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) |
Timeline
- Apr 22, 2020 CVE Published
- Jan 9, 2024 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-5427 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFIVX6HOVNLAM7W3SUAMHYRNLCVQSAWR/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQ47OFV57Y2DAHMGA5H3JOL4WHRWRFN4/ url
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-5427 url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://www.oracle.com/security-alerts/cpujul2020.html url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.9/ url
- https://hackerone.com/reports/509315 advisory
- https://www.oracle.com/security-alerts/cpujan2021.html advisory