Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-wrr7-33fx-rcvj
Advisory ID github_osv/GHSA-wrr7-33fx-rcvj
Aliases
Summary Deserialization of Untrusted Data in jackson-databind **Withdrawn:** Duplicate of GHSA-cjjf-94ff-43w7
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
generic_textual HIGH
Reference id Reference type URL
https://access.redhat.com/errata/RHSA-2019:0877
https://access.redhat.com/errata/RHSA-2019:1782
https://access.redhat.com/errata/RHSA-2019:1797
https://access.redhat.com/errata/RHSA-2019:2858
https://access.redhat.com/errata/RHSA-2019:3140
https://access.redhat.com/errata/RHSA-2019:3149
https://bugzilla.redhat.com/show_bug.cgi?id=1671098
https://github.com/FasterXML/jackson-databind/commit/28badf7ef60ac3e7ef151cd8e8ec010b8479226a
https://github.com/FasterXML/jackson-databind/issues/2052
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/7fcf88aff0d1deaa5c3c7be8d58c05ad7ad5da94b59065d8e7c50c5d@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZEDLDUYBSTDY4GWDBUXGJNS2RFYTFVRC
https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
https://seclists.org/bugtraq/2019/May/68
https://security.netapp.com/advisory/ntap-20190530-0003
https://www.blackhat.com/docs/us-16/materials/us-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE.pdf
https://www.debian.org/security/2019/dsa-4452
https://www.oracle.com/security-alerts/cpuapr2020.html
http://www.securityfocus.com/bid/107585
cpuapr2019-5072813.html Other https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
cpujul2019-5072835.html Other https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE-2018-12022 https://nvd.nist.gov/vuln/detail/CVE-2018-12022
RHBA-2019:0959 https://access.redhat.com/errata/RHBA-2019:0959
RHSA-2019:0782 https://access.redhat.com/errata/RHSA-2019:0782
RHSA-2019:1106 https://access.redhat.com/errata/RHSA-2019:1106
RHSA-2019:1107 https://access.redhat.com/errata/RHSA-2019:1107
RHSA-2019:1108 https://access.redhat.com/errata/RHSA-2019:1108
RHSA-2019:1140 https://access.redhat.com/errata/RHSA-2019:1140
RHSA-2019:1822 https://access.redhat.com/errata/RHSA-2019:1822
RHSA-2019:1823 https://access.redhat.com/errata/RHSA-2019:1823
RHSA-2019:2804 https://access.redhat.com/errata/RHSA-2019:2804
RHSA-2019:3002 https://access.redhat.com/errata/RHSA-2019:3002
RHSA-2019:3892 Advisory https://access.redhat.com/errata/RHSA-2019:3892
RHSA-2019:4037 https://access.redhat.com/errata/RHSA-2019:4037
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.