VDB
BDU%3A2019-04797
BDU%3A2019-04797
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость библиотеки Jackson-databind, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Red Hat Inc., FasterXML, LLC | Debian GNU/Linux, Astra Linux Common Edition (запись в едином реестре российских программ №4433), OpenShift Container Platform, Red Hat Virtualization, Jackson-databind |
Timeline
- Dec 22, 2019 CVE Published
- Mar 25, 2021 CVE Updated
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Distribution Patch
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://access.redhat.com/security/cve/cve-2018-5968 url
- https://github.com/FasterXML/jackson-databind/issues/1899 url
- https://www.debian.org/security/2018/dsa-4114 url
- https://access.redhat.com/errata/RHSA-2019:3149 url
- https://access.redhat.com/errata/RHSA-2019:2858 url
- https://access.redhat.com/errata/RHSA-2018:1525 url
- https://github.com/FasterXML/jackson-databind/commit/038b471e2efde2e8f96b4e0be958d3e5a1ff1d05 url