FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade stax-exUpgrade javassistUpgrade javassist-javadocUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade xalan-j2Upgrade glassfish-jaxb-apiUpgrade glassfish-fastinfosetUpgrade velocityUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade apache-commons-langUpgrade xsomUpgrade jackson-jaxrs-json-providerUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade jackson-databindUpgrade jackson-annotationsUpgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade python-nss-docUpgrade jackson-jaxrs-providersUpgrade jackson-module-jaxb-annotations | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade pki-symkey-debuginfoUpgrade python3-nssUpgrade stax-exUpgrade apache-commons-collectionsUpgrade pki-symkeyUpgrade pki-kraUpgrade pki-tools-debuginfoUpgrade jackson-jaxrs-providersUpgrade jssUpgrade pki-servlet-4.0-apiUpgrade slf4j-jdk14Upgrade pki-baseUpgrade jackson-coreUpgrade bea-stax-apiUpgrade pki-caUpgrade python-nss-debugsourceUpgrade jss-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade python-nss-docUpgrade velocityUpgrade ldapjdk-javadocUpgrade pki-serverUpgrade xmlstreambufferUpgrade xerces-j2Upgrade jakarta-commons-httpclientUpgrade javassistUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade jss-javadocUpgrade resteasyUpgrade ldapjdkUpgrade relaxngDatatypeUpgrade pki-core-debuginfoUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade slf4jUpgrade pki-base-javaUpgrade glassfish-jaxb-txw2Upgrade glassfish-jaxb-coreUpgrade apache-commons-langUpgrade python3-pkiUpgrade jss-debugsourceUpgrade jackson-module-jaxb-annotationsUpgrade jackson-databindUpgrade pki-toolsUpgrade pki-core-debugsourceUpgrade glassfish-fastinfosetUpgrade xml-commons-apisUpgrade javassist-javadocUpgrade jackson-annotationsUpgrade python3-nss-debuginfoUpgrade glassfish-jaxb-apiUpgrade xsomUpgrade xml-commons-resolver | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade jackson-jaxrs-json-providerUpgrade pki-core-debugsourceUpgrade ldapjdkUpgrade resteasyUpgrade xerces-j2Upgrade glassfish-jaxb-apiUpgrade bea-stax-apiUpgrade pki-tools-debuginfoUpgrade xmlstreambufferUpgrade pki-serverUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade pki-base-javaUpgrade xml-commons-resolverUpgrade slf4j-jdk14Upgrade xml-commons-apisUpgrade jackson-coreUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-langUpgrade velocityUpgrade pki-servlet-4.0-apiUpgrade python3-pkiUpgrade jackson-databindUpgrade glassfish-fastinfosetUpgrade jackson-annotationsUpgrade xalan-j2Upgrade pki-core-debuginfoUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade tomcatjssUpgrade pki-baseUpgrade python3-nssUpgrade javassist-javadocUpgrade pki-symkeyUpgrade stax-exUpgrade pki-caUpgrade jssUpgrade xsomUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade ldapjdk-javadocUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade pki-symkey-debuginfoUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade javassistUpgrade python-nss-docUpgrade glassfish-jaxb-txw2Upgrade jss-debugsourceUpgrade pki-servlet-engineUpgrade python3-nss-debuginfo | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python3-nss-debuginfoUpgrade python3-nssUpgrade python-nss-docUpgrade python-nss-debugsource | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub