VDB
BDU%3A2021-01382
BDU%3A2021-01382
PUBLISHED
CVSS 7.5 HIGH
Уязвимость метода readValue класса ObjectMapper библиотеки Jackson-databind, связанная с восстановлением в памяти недостоверной структуры данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», Red Hat Inc., FasterXML, LLC | Debian GNU/Linux, Astra Linux Common Edition (запись в едином реестре российских программ №4433), OpenShift Container Platform, JBoss Enterprise Application Platform, Jboss Operations Network, Jboss Fuse, Red Hat Software Collections, Jackson-databind |
Timeline
- Mar 21, 2021 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-17485 url
- https://security-tracker.debian.org/tracker/CVE-2017-17485 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1528565#c0 url
- https://github.com/FasterXML/jackson-databind/issues/1855 url
- https://access.redhat.com/errata/RHSA-2018:1447 url
- https://access.redhat.com/errata/RHSA-2018:1448 url
- https://access.redhat.com/errata/RHSA-2018:1449 url
- https://access.redhat.com/errata/RHSA-2018:2930 url
- https://access.redhat.com/errata/RHSA-2019:1797 url
- https://access.redhat.com/errata/RHSA-2019:3149 url
- https://access.redhat.com/security/cve/CVE-2017-17485 url
- https://github.com/irsl/jackson-rce-via-spel/ url
- https://access.redhat.com/errata/RHSA-2018:0116 advisory
- https://access.redhat.com/errata/RHSA-2018:0342 advisory
- https://access.redhat.com/errata/RHSA-2018:0478 advisory
- https://access.redhat.com/errata/RHSA-2018:0479 advisory
- https://access.redhat.com/errata/RHSA-2018:0480 advisory
- https://access.redhat.com/errata/RHSA-2018:0481 advisory
- https://access.redhat.com/errata/RHSA-2018:1450 advisory
- https://access.redhat.com/errata/RHSA-2018:1451 advisory
…and 3 more