FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade jackson-jaxrs-providersUpgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade stax-exUpgrade jackson-jaxrs-json-providerUpgrade relaxngDatatypeUpgrade slf4j-jdk14Upgrade slf4jUpgrade xerces-j2Upgrade jackson-coreUpgrade jackson-module-jaxb-annotationsUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-apisUpgrade apache-commons-langUpgrade bea-stax-apiUpgrade jackson-annotationsUpgrade xalan-j2Upgrade velocityUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade jakarta-commons-httpclientUpgrade xsomUpgrade python3-nssUpgrade glassfish-jaxb-coreUpgrade glassfish-fastinfosetUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade glassfish-jaxb-txw2Upgrade python-nss-doc | May 13, 2022 | Mar 2, 2020 |
| Centos_linux | — | Upgrade pki-caUpgrade javassist-javadocUpgrade jssUpgrade xml-commons-resolverUpgrade xml-commons-apisUpgrade jackson-coreUpgrade jackson-databindUpgrade pki-core-debuginfoUpgrade pki-servlet-4.0-apiUpgrade python-nss-docUpgrade pki-tools-debuginfoUpgrade jss-debugsourceUpgrade xalan-j2Upgrade python3-nss-debuginfoUpgrade glassfish-jaxb-txw2Upgrade pki-serverUpgrade glassfish-jaxb-coreUpgrade pki-base-javaUpgrade xerces-j2Upgrade pki-baseUpgrade xmlstreambufferUpgrade jackson-jaxrs-json-providerUpgrade glassfish-jaxb-runtimeUpgrade xsomUpgrade relaxngDatatypeUpgrade pki-core-debugsourceUpgrade apache-commons-langUpgrade jackson-annotationsUpgrade slf4j-jdk14Upgrade glassfish-jaxb-apiUpgrade tomcatjssUpgrade python-nss-debugsourceUpgrade ldapjdk-javadocUpgrade ldapjdkUpgrade jss-debuginfoUpgrade resteasyUpgrade pki-kraUpgrade python3-nssUpgrade bea-stax-apiUpgrade javassistUpgrade jakarta-commons-httpclientUpgrade jackson-module-jaxb-annotationsUpgrade stax-exUpgrade pki-symkey-debuginfoUpgrade pki-symkeyUpgrade python3-pkiUpgrade jss-javadocUpgrade jackson-jaxrs-providersUpgrade pki-toolsUpgrade glassfish-fastinfosetUpgrade velocityUpgrade pki-servlet-engineUpgrade slf4jUpgrade apache-commons-collections | Oct 4, 2021 | Mar 2, 2020 |
| Debian | — | Upgrade jackson-databind | Mar 9, 2020 | Mar 2, 2020 |
| Freebsd | — | Upgrade puppetdb5 | Aug 11, 2020 | Aug 11, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 2, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 2, 2020 |
| Redhat_linux | — | Upgrade slf4j-jdk14Upgrade jackson-module-jaxb-annotationsUpgrade jackson-coreUpgrade pki-serverUpgrade resteasyUpgrade javassistUpgrade pki-kraUpgrade pki-servlet-engineUpgrade ldapjdk-javadocUpgrade tomcatjssUpgrade apache-commons-langUpgrade pki-symkey-debuginfoUpgrade velocityUpgrade relaxngDatatypeUpgrade python-nss-debugsourceUpgrade jackson-jaxrs-providersUpgrade jss-debuginfoUpgrade jakarta-commons-httpclientUpgrade pki-toolsUpgrade jackson-annotationsUpgrade glassfish-jaxb-apiUpgrade stax-exUpgrade slf4jUpgrade jss-debugsourceUpgrade jss-javadocUpgrade xml-commons-apisUpgrade python3-nssUpgrade glassfish-jaxb-txw2Upgrade pki-base-javaUpgrade glassfish-jaxb-coreUpgrade jssUpgrade xmlstreambufferUpgrade python-nss-docUpgrade xerces-j2Upgrade python3-nss-debuginfoUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-runtimeUpgrade xml-commons-resolverUpgrade javassist-javadocUpgrade pki-baseUpgrade pki-tools-debuginfoUpgrade pki-caUpgrade pki-servlet-4.0-apiUpgrade bea-stax-apiUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade glassfish-fastinfosetUpgrade pki-core-debugsourceUpgrade pki-symkeyUpgrade xsomUpgrade python3-pkiUpgrade ldapjdkUpgrade apache-commons-collectionsUpgrade jackson-databind | Oct 4, 2021 | Mar 2, 2020 |
| Rocky_linux | — | Upgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Mar 2, 2020 |
| Ubuntu | — | Upgrade libjackson2-databind-java (Ubuntu Pro) | Mar 22, 2023 | Mar 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub