VDB
BDU%3A2021-01382
BDU%3A2021-01382
PUBLISHED
CVSS 7.5 HIGH
Уязвимость метода readValue класса ObjectMapper библиотеки Jackson-databind, связанная с восстановлением в памяти недостоверной структуры данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Red Hat Inc., FasterXML, LLC | Debian GNU/Linux, Astra Linux Common Edition (запись в едином реестре российских программ №4433), OpenShift Container Platform, JBoss Enterprise Application Platform, Jboss Operations Network, Jboss Fuse, Red Hat Software Collections, Jackson-databind | |
| Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Red Hat, Inc., FasterXML, LLC | Debian GNU/Linux, Astra Linux Common Edition (запись в едином реестре российских программ №4433), OpenShift Container Platform, JBoss Enterprise Application Platform, Jboss Operations Network, Jboss Fuse, Red Hat Software Collections, Jackson-databind |
Timeline
- Mar 21, 2021 CVE Published
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
- Sep 23, 2026 Distribution Patch
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-17485 url
- https://security-tracker.debian.org/tracker/CVE-2017-17485 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1528565#c0 url
- https://github.com/FasterXML/jackson-databind/issues/1855 url
- https://access.redhat.com/errata/RHSA-2018:0116 advisory
- https://access.redhat.com/errata/RHSA-2018:0342 advisory
- https://access.redhat.com/errata/RHSA-2018:0478 advisory
- https://access.redhat.com/errata/RHSA-2018:0479 advisory
- https://access.redhat.com/errata/RHSA-2018:0480 advisory
- https://access.redhat.com/errata/RHSA-2018:0481 advisory
- https://access.redhat.com/errata/RHSA-2018:1447 advisory
- https://access.redhat.com/errata/RHSA-2018:1448 advisory
- https://access.redhat.com/errata/RHSA-2018:1449 advisory
- https://access.redhat.com/errata/RHSA-2018:1450 advisory
- https://access.redhat.com/errata/RHSA-2018:1451 advisory
- https://access.redhat.com/errata/RHSA-2018:2930 advisory
- https://access.redhat.com/errata/RHSA-2019:1782 advisory
- https://access.redhat.com/errata/RHSA-2019:1797 advisory
- https://access.redhat.com/errata/RHSA-2019:2858 advisory
- https://access.redhat.com/errata/RHSA-2019:3149 advisory
…and 3 more