Oracle ZFS Storage Appliance: Is ZFSSA affected by CVE-2017-8046 ?

Asset ID:	1-72-2378204.1
Update Date:	2018-03-29
Keywords:

Solution Type Problem Resolution Sure

Solution 2378204.1 : Oracle ZFS Storage Appliance: Is ZFSSA affected by CVE-2017-8046 ?

Related Items


Sun ZFS Storage 7420
 Oracle ZFS Storage ZS5-2
 Oracle ZFS Storage ZS3-2
 Oracle ZFS Storage ZS4-4
 Oracle ZFS Storage ZS5-4
 Oracle ZFS Storage ZS3-4
 Sun ZFS Storage 7120
 Sun ZFS Storage 7320
 Oracle ZFS Storage ZS3-BA

Related Categories


PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: ZS

In this Document

Symptoms

Changes

Cause

Solution

Applies to:

Oracle ZFS Storage ZS5-4 - Version All Versions and later
Oracle ZFS Storage ZS5-2 - Version All Versions and later
Oracle ZFS Storage ZS4-4 - Version All Versions and later
Oracle ZFS Storage ZS3-4 - Version All Versions and later
Oracle ZFS Storage ZS3-2 - Version All Versions and later
7000 Appliance OS (Fishworks)

Symptoms

Is the Oracle ZFS Storage Appliance vulnerable to CVE-2017-8046 ?

CVE-2017-8046 Information: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8046

Malicious PATCH requests submitted to spring-data-rest servers in Pivotal Spring Data REST versions prior to 2.5.12, 2.6.7, 3.0 RC3, Spring Boot versions prior to 2.0.0M4, and Spring Data release trains prior to Kay-RC3 can use specially crafted JSON data to run arbitrary Java code.

Changes

N/A

Cause

Does CVE-2017-8046 affect the ZFSSA ?

Solution

Update from Security/ZFSSA group:

> There is no Java or Java JSON in ZFSSA, therefore CVE-2017-8046 is NOT applicable.

Attachments

This solution has no attachment