VDB

BDU%3A2024-00114

BDU%3A2024-00114 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость библиотеки Jackson-databind, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании

Risk Scores

CVSS 2.0
7.800000190734863

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Oracle Corp., NetApp Inc., Novell Inc., АО "НППКТ", АО «НТЦ ИТ РОСА», АО «ИВК», FasterXML, LLCRed Hat Enterprise Linux, Debian GNU/Linux, Primavera Unifier, OnCommand Workflow Automation, OpenShift Application Runtimes, Red Hat Single Sign-On, openSUSE Tumbleweed, PeopleSoft Enterprise PeopleTools, Red Hat BPM Suite, Oracle Coherence, Oracle SD-WAN Edge, SUSE Linux Enterprise Module for Basesystem, Oracle WebLogic Server Proxy Plug-In, Red Hat Integration Camel K, Red Hat Integration Service Registry, OpenSUSE Leap, Red Hat CodeReady Studio, Red Hat JBoss A-MQ, Red Hat JBoss BRMS, Suse Linux Enterprise Server, OpenShift Logging, Primavera Gateway, Snap Creator Framework, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, SUSE Manager Server, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Module for Development Tools, SUSE Manager Retail Branch Server, Oracle Utilities Framework, Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, Red Hat OpenShift Container Platform, Cloud Insights Acquisition Unit, Red Hat Integration Change Data Capture, Financial Services Analytical Applications Infrastructure, Oracle Communications Cloud Native Core Console, JBoss Enterprise Application Platform, SUSE Linux Enterprise Real Time, Communications Billing and Revenue Management, Decision Manager, Oracle Financial Services Crime and Compliance Management Studio, Oracle Big Data Spatial and Graph, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Communications Cloud Native Core Binding Support Function, РОСА ХРОМ (запись в едином реестре российских программ №1607), Red Hat JBoss Enterprise Application Platform, Active IQ Unified Manager for Linux, АЛЬТ СП 10, Oracle Commerce Platform, Logging subsystem for Red Hat OpenShift, Red Hat AMQ Streams, Red Hat AMQ, Red Hat Fuse, Red Hat build of Eclipse Vert.x, Red Hat support for Spring Boot, Oracle Financial Services Enterprise Case Management, Red Hat Data Grid, RHAF Camel-K, Jackson-databind, Red Hat build of Quarkus, Red Hat Process Automation Manager, Red Hat A-MQ Online, Oracle Graph Server and Client, Spatial studio, Oracle Communications Cloud Native Core Network Repository Function, Oracle Communications Cloud Native Core Network Slice Selection Function, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications Cloud Native Core Service Communication Proxy (SCP), Oracle Communications Cloud Native Core Unified Data Repository, Primavera P6 Enterprise Project Portfolio Management, Financial Services Behavior Detection Platform, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition, Oracle Global Lifecycle Management NextGen OUI Framework, Oracle Health Sciences Empirica Signal, Oracle Retail Sales Audit, SUSE Liberty Linux

Timeline

  • Jan 10, 2024 CVE Published
  • Dec 26, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›