jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Atlassian Bitbucket | — | Upgrade Atlassian Bitbucket to the latest version | Nov 14, 2024 | Oct 17, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Nov 21, 2023 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-jwtUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-little-pluggerUpgrade rubygem-ffiUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-multi_jsonUpgrade rubygem-amazing_printUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_katelloUpgrade satellite-cliUpgrade rubygem-snaky_hashUpgrade rubygem-apipie-bindingsUpgrade rubygem-loggingUpgrade rubygem-oauth-ttyUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-localeUpgrade rubygem-clampUpgrade foreman-cliUpgrade rubygem-foreman_maintainUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-powerbar | Oct 26, 2023 | Mar 18, 2023 |
| Debian | — | Upgrade jackson-databind | Jul 30, 2024 | Mar 18, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 19, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade python39-pulp_manifestUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-foreman_maintainUpgrade satellite-cloneUpgrade rubygem-apipie-bindingsUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-unf_extUpgrade rubygem-unfUpgrade rubygem-mime-typesUpgrade rubygem-hashieNo solution existsUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-gssapiUpgrade rubygem-snaky_hashUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-loggingUpgrade satellite-maintainUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-little-pluggerUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-fast_gettextUpgrade rubygem-oauth-ttyUpgrade rubygem-clampUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-accept | Oct 26, 2023 | Mar 18, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Mar 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub