CVE-2018-8013
Critical
Description
In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Apache Batik
PublishedMay 24, 2018
First seenMay 24, 2018
How to fix
Update
- apache batik1.10 or later
- oracle communications_diameter_signaling_router8.3 or later
- oracle communications_webrtc_session_controller7.2 or later
- org.apache.xmlgraphics:batik1.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache batik | 1.0 ≤ v < 1.10 | 1.10 |
| debian debian_linux | 7.0, 8.0, 9.0 | — |
| canonical ubuntu_linux | 14.04 | — |
| oracle business_intelligence | 11.1.1.7.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 | — |
| oracle communications_diameter_signaling_router | v < 8.3 | 8.3 |
| oracle communications_metasolv_solution | 6.3.0 | — |
| oracle communications_webrtc_session_controller | v < 7.2 | 7.2 |
| oracle data_integrator | 12.2.1.3.0 | — |
| oracle enterprise_repository | 11.1.1.7.0, 12.1.3.0.0 | — |
| oracle financial_services_analytical_applications_infrastructure | 7.3.3.0.0 ≤ v ≤ 7.3.3.0.2, 8.0.0.0.0 ≤ v ≤ 8.0.7.1.0 | — |
| oracle fusion_middleware_mapviewer | 12.2.1.2, 12.2.1.3 | — |
| oracle instantis_enterprisetrack | 17.1, 17.2, 17.3 | — |
| oracle insurance_calculation_engine | 10.1.1, 10.2.1 | — |
| oracle insurance_policy_administration_j2ee | 10.0, 10.2 | — |
| oracle jd_edwards_enterpriseone_tools | 9.2 | — |
| oracle retail_back_office | 13.3, 13.4, 14, 14.1 | — |
| oracle retail_central_office | 14.1 | — |
| oracle retail_integration_bus | 17.0 | — |
| oracle retail_order_broker | 5.1, 5.2, 15.0, 16.0 | — |
| oracle retail_point-of-service | 13.4, 14.0, 14.1 | — |
| oracle retail_returns_management | 14.1 | — |
| org.apache.xmlgraphics:batikMaven | 1.0 ≤ v < 1.10 | 1.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.