FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slf4jUpgrade apache-commons-langUpgrade xmlstreambufferUpgrade xerces-j2Upgrade xml-commons-resolverUpgrade jackson-databindUpgrade xml-commons-apisUpgrade bea-stax-apiUpgrade jackson-jaxrs-providersUpgrade stax-exUpgrade jackson-annotationsUpgrade slf4j-jdk14Upgrade jackson-coreUpgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade jackson-module-jaxb-annotationsUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-txw2Upgrade javassistUpgrade velocityUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade glassfish-fastinfosetUpgrade jakarta-commons-httpclientUpgrade glassfish-jaxb-apiUpgrade xalan-j2Upgrade glassfish-jaxb-coreUpgrade python-nss-docUpgrade xsomUpgrade python3-nss | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade pki-kraUpgrade apache-commons-collectionsUpgrade resteasyUpgrade jss-debuginfoUpgrade tomcatjssUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade slf4jUpgrade jackson-annotationsUpgrade javassistUpgrade bea-stax-apiUpgrade velocityUpgrade ldapjdk-javadocUpgrade slf4j-jdk14Upgrade ldapjdkUpgrade glassfish-jaxb-apiUpgrade python-nss-debugsourceUpgrade jakarta-commons-httpclientUpgrade pki-symkeyUpgrade python3-nssUpgrade stax-exUpgrade jackson-module-jaxb-annotationsUpgrade python3-pkiUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade pki-toolsUpgrade glassfish-jaxb-txw2Upgrade pki-caUpgrade jssUpgrade xml-commons-resolverUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade pki-core-debugsourceUpgrade javassist-javadocUpgrade jackson-jaxrs-json-providerUpgrade apache-commons-langUpgrade jackson-coreUpgrade pki-tools-debuginfoUpgrade jss-debugsourceUpgrade xerces-j2Upgrade pki-base-javaUpgrade pki-baseUpgrade xmlstreambufferUpgrade glassfish-jaxb-runtimeUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-coreUpgrade pki-serverUpgrade xsomUpgrade relaxngDatatypeUpgrade xml-commons-apisUpgrade xalan-j2Upgrade jackson-databindUpgrade pki-servlet-4.0-api | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Freebsd | — | Upgrade puppetdb5 | Aug 11, 2020 | Aug 11, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade pki-tools-debuginfoUpgrade pki-caUpgrade jssUpgrade xsomUpgrade python-nss-docUpgrade bea-stax-apiUpgrade jackson-jaxrs-json-providerUpgrade pki-servlet-4.0-apiUpgrade pki-core-debugsourceUpgrade apache-commons-collectionsUpgrade xmlstreambufferUpgrade ldapjdkUpgrade pki-symkeyUpgrade python3-nss-debuginfoUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-coreUpgrade pki-core-debuginfoUpgrade python3-pkiUpgrade glassfish-jaxb-runtimeUpgrade glassfish-jaxb-txw2Upgrade xml-commons-resolverUpgrade javassist-javadocUpgrade xerces-j2Upgrade xalan-j2Upgrade pki-baseUpgrade python3-nssUpgrade pki-base-javaUpgrade jackson-databindUpgrade glassfish-jaxb-apiUpgrade python-nss-debugsourceUpgrade jss-debugsourceUpgrade pki-symkey-debuginfoUpgrade jakarta-commons-httpclientUpgrade jss-debuginfoUpgrade pki-toolsUpgrade velocityUpgrade pki-serverUpgrade apache-commons-langUpgrade xml-commons-apisUpgrade tomcatjssUpgrade stax-exUpgrade jackson-coreUpgrade jackson-module-jaxb-annotationsUpgrade resteasyUpgrade pki-servlet-engineUpgrade pki-kraUpgrade relaxngDatatypeUpgrade ldapjdk-javadocUpgrade jackson-jaxrs-providersUpgrade javassistUpgrade slf4jUpgrade jackson-annotationsUpgrade slf4j-jdk14Upgrade jss-javadoc | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python-nss-debugsource | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub