FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glassfish-jaxb-runtimeUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade jackson-annotationsUpgrade jackson-jaxrs-json-providerUpgrade jackson-coreUpgrade xsomUpgrade xmlstreambufferUpgrade slf4j-jdk14Upgrade relaxngDatatypeUpgrade apache-commons-langUpgrade xerces-j2Upgrade jackson-databindUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade xml-commons-apisUpgrade bea-stax-apiUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade velocityUpgrade javassist-javadocUpgrade glassfish-fastinfosetUpgrade xalan-j2Upgrade javassistUpgrade glassfish-jaxb-coreUpgrade glassfish-jaxb-apiUpgrade stax-ex | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade pki-toolsUpgrade xalan-j2Upgrade pki-base-javaUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade slf4jUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade glassfish-jaxb-apiUpgrade jackson-databindUpgrade jackson-annotationsUpgrade xsomUpgrade javassistUpgrade python3-nss-debuginfoUpgrade xerces-j2Upgrade apache-commons-langUpgrade ldapjdkUpgrade resteasyUpgrade pki-core-debuginfoUpgrade relaxngDatatypeUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jakarta-commons-httpclientUpgrade python3-pkiUpgrade pki-serverUpgrade xmlstreambufferUpgrade pki-core-debugsourceUpgrade jss-javadocUpgrade glassfish-fastinfosetUpgrade pki-servlet-4.0-apiUpgrade pki-tools-debuginfoUpgrade jss-debuginfoUpgrade pki-symkey-debuginfoUpgrade bea-stax-apiUpgrade python3-nssUpgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-collectionsUpgrade jssUpgrade pki-caUpgrade pki-kraUpgrade jackson-jaxrs-providersUpgrade slf4j-jdk14Upgrade pki-baseUpgrade jackson-coreUpgrade stax-exUpgrade velocityUpgrade python-nss-debugsourceUpgrade pki-symkey | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade slf4jUpgrade python-nss-docUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-txw2Upgrade jss-debugsourceUpgrade python3-nssUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade xsomUpgrade jssUpgrade ldapjdk-javadocUpgrade stax-exUpgrade pki-caUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade pki-symkey-debuginfoUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade javassistUpgrade pki-serverUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade bea-stax-apiUpgrade glassfish-fastinfosetUpgrade jackson-annotationsUpgrade xml-commons-apisUpgrade jackson-databindUpgrade pki-servlet-4.0-apiUpgrade pki-kraUpgrade jss-javadocUpgrade pki-base-javaUpgrade xalan-j2Upgrade apache-commons-langUpgrade slf4j-jdk14Upgrade velocityUpgrade pki-core-debugsourceUpgrade python3-pkiUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade pki-tools-debuginfoUpgrade tomcatjssUpgrade pki-core-debuginfoUpgrade jackson-coreUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade pki-baseUpgrade resteasyUpgrade xerces-j2 | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub