GCVE-110-MAGEIA-2017-408

Advisory Published

Vulnetix · Advisory published November 16, 2017

An unsafe deserialization vulnerability was found due to incomplete blacklisting of the unsafe elements, due to an incomplete fix for CVE-2017-7525 (CVE-2017-15095).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	jackson-databind	0 (affected), 2.7.6-1.2.mga6 (unaffected)	—
Mageia	jackson-databind	2.4.3-4.2.mga5 (unaffected), 0 (affected)	—

Aliases

CVE-2017-15095

References

Updated jackson-databind packages fix security vulnerability

advisory

Updated jackson-databind packages fix security vulnerability

issue

Updated jackson-databind packages fix security vulnerability

issue

Updated jackson-databind packages fix security vulnerability

issue

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON