FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade velocityUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade stax-exUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade javassist-javadocUpgrade bea-stax-apiUpgrade xalan-j2Upgrade glassfish-jaxb-apiUpgrade slf4j-jdk14Upgrade jackson-annotationsUpgrade jackson-jaxrs-providersUpgrade python3-nssUpgrade apache-commons-langUpgrade xml-commons-apisUpgrade python-nss-docUpgrade xsomUpgrade xmlstreambufferUpgrade glassfish-jaxb-runtimeUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade jackson-databindUpgrade jackson-module-jaxb-annotationsUpgrade relaxngDatatypeUpgrade jackson-coreUpgrade glassfish-jaxb-txw2 | May 4, 2022 | Jan 3, 2020 |
| Centos_linux | — | Upgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-apiUpgrade xsomUpgrade pki-serverUpgrade jackson-module-jaxb-annotationsUpgrade javassist-javadocUpgrade pki-toolsUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade jackson-annotationsUpgrade apache-commons-langUpgrade ldapjdkUpgrade xml-commons-resolverUpgrade jss-javadocUpgrade python3-pkiUpgrade resteasyUpgrade javassistUpgrade xerces-j2Upgrade xmlstreambufferUpgrade python3-nss-debuginfoUpgrade relaxngDatatypeUpgrade tomcatjssUpgrade jss-debugsourceUpgrade pki-base-javaUpgrade glassfish-jaxb-txw2Upgrade pki-servlet-engineUpgrade pki-core-debuginfoUpgrade xalan-j2Upgrade xml-commons-apisUpgrade glassfish-fastinfosetUpgrade jackson-databindUpgrade pki-core-debugsourceUpgrade ldapjdk-javadocUpgrade jakarta-commons-httpclientUpgrade jss-debuginfoUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade stax-exUpgrade glassfish-jaxb-runtimeUpgrade pki-symkeyUpgrade slf4j-jdk14Upgrade pki-kraUpgrade jackson-jaxrs-providersUpgrade python3-nssUpgrade bea-stax-apiUpgrade jackson-coreUpgrade python-nss-debugsourceUpgrade pki-caUpgrade velocityUpgrade apache-commons-collectionsUpgrade pki-servlet-4.0-apiUpgrade jssUpgrade pki-symkey-debuginfo | Feb 8, 2021 | Jan 3, 2020 |
| Debian | — | Upgrade jackson-databind | Feb 24, 2020 | Jan 3, 2020 |
| Redhat_linux | — | Upgrade jackson-jaxrs-providersUpgrade pki-tools-debuginfoUpgrade xmlstreambufferUpgrade glassfish-fastinfosetUpgrade resteasyUpgrade jackson-jaxrs-json-providerUpgrade python3-pkiUpgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade pki-base-javaUpgrade bea-stax-apiUpgrade tomcatjssUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade pki-kraUpgrade jss-javadocUpgrade pki-baseUpgrade apache-commons-langUpgrade glassfish-jaxb-apiUpgrade velocityUpgrade pki-core-debuginfoUpgrade pki-core-debugsourceUpgrade xml-commons-resolverUpgrade jackson-coreUpgrade pki-serverUpgrade xml-commons-apisUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade xerces-j2Upgrade ldapjdkUpgrade xalan-j2Upgrade jackson-databindUpgrade slf4jUpgrade glassfish-jaxb-coreUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade pki-symkey-debuginfoUpgrade xsomUpgrade jss-debugsourceUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade stax-exUpgrade pki-servlet-engineUpgrade python-nss-debugsourceUpgrade python-nss-docUpgrade pki-caUpgrade python3-nssUpgrade pki-symkeyUpgrade ldapjdk-javadocUpgrade jssUpgrade python3-nss-debuginfoUpgrade jss-debuginfoUpgrade javassistUpgrade jakarta-commons-httpclient | Feb 8, 2021 | Jan 3, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade python3-nss | Mar 12, 2024 | Jan 3, 2020 |
| Suse | — | Upgrade jackson-databind | Feb 4, 2022 | Jan 3, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Jan 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub