SB2018051725 - Red Hat update for jackson-databind
Published: May 17, 2018
Security Bulletin ID
SB2018051725
Severity
High
Patch available
YES
Number of vulnerabilities
7
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Man-in-the-middle attack (CVE-ID: CVE-2017-12196)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.The weakness exists due to the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line when using Digest authentication. A remote attacker can conduct man-in-the-middle attack and gin access to potentially sensitive information.
2) Information disclosure through an error message (CVE-ID: CVE-2018-1073)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.The weakness exists in the ovirt-engine web console login form due to returning different errors for non-existent users and invalid passwords. A remote attacker can discover the names of valid user accounts.
3) Deserialization of untrusted data (CVE-ID: CVE-2018-5968)
The vulnerability allows a remote attacker to execute arbitrary code.The weakness exists due to deserialization flaw. A remote attacker can supply specially crafted input, execute arbitrary code and bypass a blacklist on the target system.
Successful exploitation of the vulnerability may result in system compromise.
4) Authentication bypass (CVE-ID: CVE-2018-7750)
The vulnerability allows a remote unauthenticated attacker to bypass authentication.The weakness exists is due to improper security restrictions. A remote attacker can use a customized SSH client, bypass authentication and gain unauthorized access to resources on the target systemю
5) Improper access control (CVE-ID: CVE-2018-8088)
The vulnerability allows a remote unauthenticated attacker to bypass access restrictions on the target system.The weakness exists in the org.slf4j.ext.EventData class due to improper security restrictions. A remote attacker can send specially crafted input, bypass access restrictions and gain unauthorized access to perform further attacks.
6) Deserialization of untrusted data (CVE-ID: CVE-2017-7525)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due to a deserialization flaw in the jackson-databind component. A remote attacker can send a specially crafted input to the readValue method of the ObjectMapper and execute arbitrary code with privileges of the target service.
Successful exploitation of the vulnerability may result in system compromise.
7) Deserialization of untrusted data (CVE-ID: CVE-2017-17485)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists in the FasterXML jackson-databind library due to improper validation of user-input handled by the readValue method of the ObjectMapper object. A remote attacker can send malicious input to the vulnerable method of a web application that uses the Spring library in the application's classpath and execute arbitrary code with elevated privileges.
Successful exploitation of the vulnerability may result in system compromise.
Remediation
Install update from vendor's website.