FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-nss-docUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade javassistUpgrade glassfish-fastinfosetUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-apiUpgrade xsomUpgrade glassfish-jaxb-txw2Upgrade velocityUpgrade xalan-j2Upgrade javassist-javadocUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade xml-commons-apisUpgrade xerces-j2Upgrade stax-exUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade slf4jUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade bea-stax-apiUpgrade jackson-jaxrs-json-provider | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade glassfish-jaxb-runtimeUpgrade pki-serverUpgrade pki-baseUpgrade xmlstreambufferUpgrade javassist-javadocUpgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-txw2Upgrade apache-commons-langUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-coreUpgrade pki-tools-debuginfoUpgrade pki-core-debugsourceUpgrade jackson-coreUpgrade python-nss-docUpgrade xsomUpgrade jss-debugsourceUpgrade pki-core-debuginfoUpgrade xerces-j2Upgrade xalan-j2Upgrade pki-base-javaUpgrade jackson-databindUpgrade pki-servlet-4.0-apiUpgrade xml-commons-apisUpgrade xml-commons-resolverUpgrade jssUpgrade pki-caUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade python3-nssUpgrade jss-debuginfoUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade bea-stax-apiUpgrade velocityUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade resteasyUpgrade ldapjdk-javadocUpgrade stax-exUpgrade pki-symkey-debuginfoUpgrade pki-symkeyUpgrade python3-pkiUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade slf4jUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade pki-toolsUpgrade glassfish-jaxb-apiUpgrade pki-kraUpgrade tomcatjssUpgrade apache-commons-collectionsUpgrade python-nss-debugsource | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Freebsd | — | Upgrade puppetdb5 | Aug 11, 2020 | Aug 11, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade javassistUpgrade pki-servlet-engineUpgrade velocityUpgrade pki-serverUpgrade glassfish-jaxb-apiUpgrade jackson-annotationsUpgrade tomcatjssUpgrade slf4j-jdk14Upgrade jakarta-commons-httpclientUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade slf4jUpgrade jss-javadocUpgrade jss-debuginfoUpgrade relaxngDatatypeUpgrade stax-exUpgrade apache-commons-langUpgrade pki-kraUpgrade jackson-coreUpgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotationsUpgrade jss-debugsourceUpgrade resteasyUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade xml-commons-apisUpgrade python3-nssUpgrade python-nss-docUpgrade glassfish-fastinfosetUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade pki-tools-debuginfoUpgrade javassist-javadocUpgrade xalan-j2Upgrade pki-caUpgrade xerces-j2Upgrade glassfish-jaxb-txw2Upgrade pki-symkeyUpgrade pki-base-javaUpgrade xsomUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade jssUpgrade ldapjdkUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debugsourceUpgrade pki-servlet-4.0-apiUpgrade apache-commons-collectionsUpgrade pki-baseUpgrade jackson-databindUpgrade python3-pkiUpgrade python3-nss-debuginfoUpgrade xml-commons-resolver | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python-nss-debugsource | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub