The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xalan-j2Upgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade apache-commons-langUpgrade javassistUpgrade glassfish-jaxb-coreUpgrade xsomUpgrade glassfish-jaxb-txw2Upgrade relaxngDatatypeUpgrade jakarta-commons-httpclientUpgrade xml-commons-apisUpgrade javassist-javadocUpgrade slf4jUpgrade jackson-jaxrs-json-providerUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-fastinfosetUpgrade stax-exUpgrade python3-nssUpgrade apache-commons-collectionsUpgrade slf4j-jdk14Upgrade xmlstreambufferUpgrade python-nss-docUpgrade xerces-j2Upgrade velocityUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade jackson-jaxrs-providers | May 13, 2022 | Jun 24, 2019 |
| Centos_linux | — | Upgrade stax-exUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade jackson-coreUpgrade xmlstreambufferUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade python3-nss-debuginfoUpgrade slf4j-jdk14Upgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade xsomUpgrade python-nss-docUpgrade jackson-databindUpgrade jackson-jaxrs-providersUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade apache-commons-langUpgrade jackson-annotationsUpgrade xalan-j2Upgrade resteasyUpgrade glassfish-jaxb-coreUpgrade pki-servlet-containerUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade javassistUpgrade slf4jUpgrade relaxngDatatypeUpgrade glassfish-fastinfosetUpgrade python-nss-debugsourceUpgrade javassist-javadocUpgrade velocityUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-txw2 | Sep 12, 2019 | Jun 24, 2019 |
| Debian | — | Upgrade jackson-databind | Jun 24, 2019 | Jun 24, 2019 |
| Oracle_linux | — | Upgrade glassfish-jaxb-txw2Upgrade xsomUpgrade python-nss-docUpgrade javassist-javadocUpgrade slf4jUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade xalan-j2Upgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade jackson-annotationsUpgrade relaxngDatatypeUpgrade pki-servlet-containerUpgrade xml-commons-apisUpgrade jackson-databindUpgrade slf4j-jdk14Upgrade python3-nssUpgrade apache-commons-langUpgrade resteasyUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-providersUpgrade velocityUpgrade xerces-j2Upgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade bea-stax-apiUpgrade jackson-coreUpgrade stax-exUpgrade glassfish-jaxb-apiUpgrade xmlstreambuffer | Oct 5, 2022 | Jun 21, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 21, 2019 |
| Redhat Openshift | — | Upgrade logging | Oct 8, 2019 | Jun 24, 2019 |
| Redhat_linux | — | Upgrade pki-servlet-containerUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade python3-nssUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade slf4jUpgrade xml-commons-apisUpgrade jakarta-commons-httpclientUpgrade jackson-annotationsUpgrade velocityUpgrade bea-stax-apiUpgrade python-nss-debugsourceUpgrade slf4j-jdk14Upgrade stax-exUpgrade jackson-coreUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade relaxngDatatypeUpgrade glassfish-jaxb-txw2Upgrade jackson-databindUpgrade xml-commons-resolverUpgrade python3-nss-debuginfoUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade resteasyUpgrade xmlstreambufferUpgrade pki-servlet-4.0-apiUpgrade xsomUpgrade xalan-j2Upgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collections | Sep 12, 2019 | Jun 24, 2019 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python-nss-doc | Mar 12, 2024 | Jun 24, 2019 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jun 24, 2019 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jun 24, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub