jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 14, 2024 | Oct 17, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Nov 21, 2023 |
| Centos_linux | — | Upgrade rubygem-http-acceptUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade rubygem-snaky_hashUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-oauth-ttyUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-apipie-bindingsUpgrade rubygem-loggingUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade satellite-cloneUpgrade rubygem-gssapiUpgrade satellite-maintainUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-foreman_maintainUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cliUpgrade rubygem-netrcUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade rubygem-http-cookie | Oct 26, 2023 | Mar 18, 2023 |
| Debian | — | Upgrade jackson-databind | Jul 30, 2024 | Mar 18, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 19, 2023 |
| Redhat_linux | — | Upgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade satellite-maintainUpgrade rubygem-hammer_cliUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-acceptUpgrade rubygem-highlineUpgrade rubygem-jwtUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_extUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade satellite-cliUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceNo solution existsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-types-dataUpgrade rubygem-apipie-bindingsUpgrade rubygem-mime-typesUpgrade python39-pulp_manifestUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-version_gemUpgrade rubygem-powerbarUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debuginfo | Oct 26, 2023 | Mar 18, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub