jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 14, 2024 | Oct 17, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Nov 21, 2023 |
| Centos_linux | — | Upgrade rubygem-amazing_printUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-snaky_hashUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-unicode-display_widthUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade satellite-cloneUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-jwtUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade python39-pulp_manifestUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade foreman-cliUpgrade rubygem-http-cookieUpgrade rubygem-localeUpgrade rubygem-rest-clientUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cliUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-powerbarUpgrade rubygem-highline | Oct 26, 2023 | Mar 18, 2023 |
| Debian | — | Upgrade jackson-databind | Jul 30, 2024 | Mar 18, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 19, 2023 |
| Redhat_linux | — | Upgrade rubygem-ffi-debugsourceUpgrade foreman-cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cliUpgrade rubygem-clampUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-jwtUpgrade rubygem-unicodeUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-gssapiUpgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-rest-clientUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade python39-pulp_manifestUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-http-cookieUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-types-dataUpgrade rubygem-domain_nameUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-ffiUpgrade rubygem-unfUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminNo solution existsUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-version_gem | Oct 26, 2023 | Mar 18, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub