FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apache-commons-collectionsUpgrade bea-stax-apiUpgrade xalan-j2Upgrade glassfish-jaxb-apiUpgrade velocityUpgrade javassist-javadocUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade glassfish-fastinfosetUpgrade javassistUpgrade slf4jUpgrade stax-exUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade jackson-annotationsUpgrade jackson-jaxrs-providersUpgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade python3-nssUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade xsomUpgrade xmlstreambufferUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade jackson-databindUpgrade xerces-j2Upgrade glassfish-jaxb-txw2Upgrade apache-commons-langUpgrade jackson-module-jaxb-annotations | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade ldapjdkUpgrade resteasyUpgrade pki-base-javaUpgrade jss-javadocUpgrade glassfish-jaxb-txw2Upgrade python3-pkiUpgrade pki-serverUpgrade jakarta-commons-httpclientUpgrade apache-commons-langUpgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade pki-servlet-engineUpgrade xml-commons-resolverUpgrade jackson-annotationsUpgrade pki-core-debugsourceUpgrade pki-toolsUpgrade xml-commons-apisUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade relaxngDatatypeUpgrade jss-debugsourceUpgrade python3-nss-debuginfoUpgrade pki-core-debuginfoUpgrade xmlstreambufferUpgrade ldapjdk-javadocUpgrade tomcatjssUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade jackson-module-jaxb-annotationsUpgrade xsomUpgrade xerces-j2Upgrade javassist-javadocUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade jssUpgrade jackson-jaxrs-providersUpgrade pki-caUpgrade stax-exUpgrade velocityUpgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade jss-debuginfoUpgrade apache-commons-collectionsUpgrade pki-servlet-4.0-apiUpgrade pki-tools-debuginfoUpgrade jackson-coreUpgrade python-nss-debugsourceUpgrade pki-symkey-debuginfoUpgrade python3-nssUpgrade pki-symkeyUpgrade pki-kraUpgrade slf4j-jdk14Upgrade bea-stax-apiUpgrade pki-base | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade pki-baseUpgrade tomcatjssUpgrade pki-core-debuginfoUpgrade slf4j-jdk14Upgrade glassfish-fastinfosetUpgrade jackson-module-jaxb-annotationsUpgrade jackson-annotationsUpgrade velocityUpgrade pki-servlet-4.0-apiUpgrade jss-javadocUpgrade pki-kraUpgrade xalan-j2Upgrade pki-core-debugsourceUpgrade python3-pkiUpgrade jackson-jaxrs-providersUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade pki-tools-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade bea-stax-apiUpgrade pki-serverUpgrade xml-commons-resolverUpgrade resteasyUpgrade jackson-coreUpgrade xerces-j2Upgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade apache-commons-langUpgrade jackson-databindUpgrade pki-base-javaUpgrade ldapjdkUpgrade glassfish-jaxb-apiUpgrade python3-nssUpgrade jss-debugsourceUpgrade pki-symkey-debuginfoUpgrade stax-exUpgrade python-nss-debugsourceUpgrade pki-caUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade pki-symkeyUpgrade javassist-javadocUpgrade xsomUpgrade apache-commons-collectionsUpgrade jakarta-commons-httpclientUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade ldapjdk-javadocUpgrade pki-servlet-engineUpgrade jss-debuginfoUpgrade slf4jUpgrade python-nss-docUpgrade jss | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python-nss-docUpgrade python-nss-debugsourceUpgrade python3-nssUpgrade python3-nss-debuginfo | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub