VDB
BDU%3A2019-04087
BDU%3A2019-04087
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции FasterXM Java-библиотеки для грамматического разбора JSON файлов jackson-databind, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., Fedora Project, Red Hat Inc., Сообщество свободного программного обеспечения, FasterXML, LLC, АО «Концерн ВНИИНС» | JD Edwards EnterpriseOne Tools, Primavera Unifier, Fedora, Oracle Retail Customer Management and Segmentation Foundation, Red Hat Enterprise Linux, Red Hat JBoss Fuse, Debian GNU/Linux, OpenShift Container Platform, Primavera Gateway, Retail Xstore Point of Service, Banking Platform, OpenShift Application Runtimes, Jackson-databind, Financial Services Analytical Applications Infrastructure, Red Hat Process Automation Manager, Communications Instant Messaging Server, Siebel UI Framework, Red Hat AMQ Streams, JBoss Enterprise Application Platform, Red Hat Single Sign-On, Red Hat Descision Manager, JD Edwards EnterpriseOne Orchestrator, Siebel Engineering - Installer & Deployment, JBoss EAP, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Nov 19, 2019 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHBA-2019:2824 url
- https://access.redhat.com/errata/RHSA-2019:2743 url
- https://access.redhat.com/errata/RHSA-2019:2858 url
- https://access.redhat.com/errata/RHSA-2019:2935 url
- https://access.redhat.com/errata/RHSA-2019:2936 url
- https://access.redhat.com/errata/RHSA-2019:2937 url
- https://access.redhat.com/errata/RHSA-2019:2938 url
- https://access.redhat.com/errata/RHSA-2019:2998 url
- https://access.redhat.com/errata/RHSA-2019:3044 url
- https://access.redhat.com/errata/RHSA-2019:3045 url
- https://access.redhat.com/errata/RHSA-2019:3046 url
- https://access.redhat.com/errata/RHSA-2019:3050 url
- https://access.redhat.com/errata/RHSA-2019:3149 url
- https://access.redhat.com/errata/RHSA-2019:3200 url
- https://access.redhat.com/errata/RHSA-2019:3292 url
- https://access.redhat.com/errata/RHSA-2019:3297 url
- https://access.redhat.com/errata/RHSA-2019:3901 url
- https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.9.9.1...jackson-databind-2.9.9.2 url
- https://github.com/FasterXML/jackson-databind/issues/2387 url
- https://lists.apache.org/thread.html/0d4b630d9ee724aee50703397d9d1afa2b2befc9395ba7797d0ccea9@%3Cdev.tomee.apache.org%3E url
…and 33 more