FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade xsomUpgrade glassfish-jaxb-apiUpgrade velocityUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade python3-nssUpgrade python-nss-docUpgrade javassistUpgrade glassfish-fastinfosetUpgrade jackson-jaxrs-json-providerUpgrade xml-commons-resolverUpgrade bea-stax-apiUpgrade slf4j-jdk14Upgrade xmlstreambufferUpgrade jackson-jaxrs-providersUpgrade jackson-annotationsUpgrade xerces-j2Upgrade stax-exUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade jackson-coreUpgrade slf4jUpgrade xml-commons-apisUpgrade glassfish-jaxb-runtimeUpgrade relaxngDatatypeUpgrade jackson-databind | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade resteasyUpgrade ldapjdkUpgrade pki-symkey-debuginfoUpgrade ldapjdk-javadocUpgrade slf4j-jdk14Upgrade tomcatjssUpgrade python-nss-debugsourceUpgrade pki-kraUpgrade bea-stax-apiUpgrade jakarta-commons-httpclientUpgrade apache-commons-collectionsUpgrade jss-debuginfoUpgrade pki-toolsUpgrade slf4jUpgrade jss-javadocUpgrade velocityUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade pki-symkeyUpgrade python3-nssUpgrade glassfish-fastinfosetUpgrade jackson-jaxrs-providersUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade pki-tools-debuginfoUpgrade jackson-databindUpgrade xml-commons-apisUpgrade jssUpgrade pki-serverUpgrade pki-core-debuginfoUpgrade jackson-coreUpgrade glassfish-jaxb-coreUpgrade pki-core-debugsourceUpgrade pki-servlet-4.0-apiUpgrade xerces-j2Upgrade pki-base-javaUpgrade pki-baseUpgrade glassfish-jaxb-runtimeUpgrade xmlstreambufferUpgrade glassfish-jaxb-txw2Upgrade xsomUpgrade python-nss-docUpgrade jss-debugsourceUpgrade xml-commons-resolverUpgrade javassist-javadocUpgrade xalan-j2Upgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade pki-caUpgrade python3-nss-debuginfo | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Freebsd | — | Upgrade puppetdb5 | Aug 11, 2020 | Aug 11, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade jackson-jaxrs-providersUpgrade relaxngDatatypeUpgrade pki-kraUpgrade xml-commons-apisUpgrade pki-symkey-debuginfoUpgrade pki-servlet-engineUpgrade slf4jUpgrade jakarta-commons-httpclientUpgrade stax-exUpgrade resteasyUpgrade pki-serverUpgrade jss-debuginfoUpgrade velocityUpgrade jackson-annotationsUpgrade tomcatjssUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-apiUpgrade apache-commons-langUpgrade jackson-coreUpgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade jss-javadocUpgrade javassistUpgrade jss-debugsourceUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade pki-symkeyUpgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade python3-pkiUpgrade glassfish-jaxb-txw2Upgrade xsomUpgrade javassist-javadocUpgrade pki-base-javaUpgrade pki-baseUpgrade pki-core-debugsourceUpgrade xmlstreambufferUpgrade xalan-j2Upgrade apache-commons-collectionsUpgrade bea-stax-apiUpgrade pki-servlet-4.0-apiUpgrade jackson-databindUpgrade pki-tools-debuginfoUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade xerces-j2Upgrade glassfish-fastinfosetUpgrade ldapjdkUpgrade jackson-jaxrs-json-providerUpgrade pki-core-debuginfoUpgrade xml-commons-resolverUpgrade jssUpgrade glassfish-jaxb-coreUpgrade python3-nss | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub