VDB
BDU%3A2019-02925
BDU%3A2019-02925
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость класса logback-core библиотеки Jackson-databind, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Novell Inc., Fedora Project, ООО «РусБИТех-Астра», Red Hat Inc., FasterXML, LLC, Oracle Corp., АО «Концерн ВНИИНС» | Debian GNU/Linux, OpenSUSE Leap, Fedora, Astra Linux Common Edition (запись в едином реестре российских программ №4433), Red Hat Enterprise Linux, Red Hat JBoss Fuse, Jackson-databind, Retail Customer Management and Segmentation Foundation, JBoss A-MQ, OpenShift Application Runtimes, NoSQL Database, Red Hat Process Automation Manager, Red Hat AMQ Streams, JBoss Enterprise Application Platform, Red Hat Descision Manager, Red Hat JBoss EAP, GoldenGate Stream Analytics, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Aug 20, 2019 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
- Mar 23, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2019:1820 url
- https://access.redhat.com/errata/RHSA-2019:2720 url
- https://access.redhat.com/errata/RHSA-2019:2858 url
- https://access.redhat.com/errata/RHSA-2019:2935 url
- https://access.redhat.com/errata/RHSA-2019:2936 url
- https://access.redhat.com/errata/RHSA-2019:2937 url
- https://access.redhat.com/errata/RHSA-2019:2938 url
- https://access.redhat.com/errata/RHSA-2019:2998 url
- https://access.redhat.com/errata/RHSA-2019:3149 url
- https://access.redhat.com/errata/RHSA-2019:3200 url
- https://access.redhat.com/errata/RHSA-2019:3292 url
- https://access.redhat.com/errata/RHSA-2019:3297 url
- https://access.redhat.com/errata/RHSA-2019:3901 url
- https://access.redhat.com/errata/RHSA-2019:4352 url
- https://blog.doyensec.com/2019/07/22/jackson-gadgets.html url
- https://doyensec.com/research.html url
- https://github.com/FasterXML/jackson-databind/compare/74b90a4...a977aad url
- https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E url
- https://lists.apache.org/thread.html/2d2a76440becb610b9a9cb49b15eac3934b02c2dbcaacde1000353e4@%3Cdev.tomee.apache.org%3E url
- https://lists.apache.org/thread.html/34717424b4d08b74f65c09a083d6dd1cb0763f37a15d6de135998c1d@%3Cdev.tomee.apache.org%3E url
…and 26 more