VDB
RHSA-2023%3A3373
RHSA-2023%3A3373
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | mtr/mtr-operator-bundle@sha256:c6f3757a10c0f4679b414392713da6cb36760c29c375bf615cd9e1ee23f68062_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | * |
| Red Hat | mtr/mtr-rhel8-operator@sha256:45392a5ea3e1a610edf2f0ee60a721370f763e5712aefa4d1a79001f9f6f071e_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-rhel8-operator@sha256:45392a5ea3e1a610edf2f0ee60a721370f763e5712aefa4d1a79001f9f6f071e_s390x |
| Red Hat | mtr/mtr-web-executor-container-rhel8@sha256:bf6395e9f0695a261342c56b5ec33e26f841a5823cec4fb88d1fae55e983e80e_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-executor-container-rhel8@sha256:bf6395e9f0695a261342c56b5ec33e26f841a5823cec4fb88d1fae55e983e80e_arm64 |
| Red Hat | mtr/mtr-operator-bundle@sha256:f6b4463befecf9a8b5741cca535214f49842f45333704f6003853f7c403c3326_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-operator-bundle@sha256:f6b4463befecf9a8b5741cca535214f49842f45333704f6003853f7c403c3326_arm64 |
| Red Hat | mtr/mtr-web-container-rhel8@sha256:1e12bba9f5a4f819b03ad735ed7d9bef6e6fdd31cf1a7e226af202244816add3_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | * |
| Red Hat | mtr/mtr-web-executor-container-rhel8@sha256:e0c34669ad4072eb8ddfb89ba88f514e315565e4d76ef8f8725326d4bc3b38dd_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-executor-container-rhel8@sha256:e0c34669ad4072eb8ddfb89ba88f514e315565e4d76ef8f8725326d4bc3b38dd_ppc64le |
| Red Hat | mtr/mtr-web-executor-container-rhel8@sha256:aa6dccfa566506e417ffcf16288344f8c5c7f538fd92c1d53500ab47821eada7_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-executor-container-rhel8@sha256:aa6dccfa566506e417ffcf16288344f8c5c7f538fd92c1d53500ab47821eada7_amd64 |
| Red Hat | mtr/mtr-rhel8-operator@sha256:a7aeac410307931305125078e51c4086df0aba23215d2a2fd25ac003abe492dc_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-rhel8-operator@sha256:a7aeac410307931305125078e51c4086df0aba23215d2a2fd25ac003abe492dc_ppc64le |
| Red Hat | mtr/mtr-web-container-rhel8@sha256:34c77234543e286178504bbacbf543782b370adffa77e1878fcb3dd85531bacc_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-container-rhel8@sha256:34c77234543e286178504bbacbf543782b370adffa77e1878fcb3dd85531bacc_ppc64le |
| Red Hat | mtr/mtr-operator-bundle@sha256:90e1ab28e5bab215a770dd25e4091eacb9db3851801e54a15bf9bea9257ae117_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | * |
| Red Hat | mtr/mtr-rhel8-operator@sha256:c221730b6caf70982ac608448c481fd46fd5e23618ccd409a898850df3a28fe3_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-rhel8-operator@sha256:c221730b6caf70982ac608448c481fd46fd5e23618ccd409a898850df3a28fe3_arm64 |
| Red Hat | mtr/mtr-operator-bundle@sha256:90794f222e3d06e5312a808475d784b9c19c5830f3095c26d1d486a2c4c65744_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-operator-bundle@sha256:90794f222e3d06e5312a808475d784b9c19c5830f3095c26d1d486a2c4c65744_amd64 |
| Red Hat | mtr/mtr-rhel8-operator@sha256:f8ab58df5b777845c0e34328ae06ee73189573b040b018dbbac9c67da4c8077e_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-rhel8-operator@sha256:f8ab58df5b777845c0e34328ae06ee73189573b040b018dbbac9c67da4c8077e_amd64 |
| Red Hat | mtr/mtr-web-executor-container-rhel8@sha256:16cb9c5fde455960cf4f372d249c53794028953f2deef00b1b09b18c72527f5a_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-executor-container-rhel8@sha256:16cb9c5fde455960cf4f372d249c53794028953f2deef00b1b09b18c72527f5a_s390x |
| Red Hat | mtr/mtr-web-container-rhel8@sha256:01aff83b56ddcb52aa891defe2e9a68c41ef33f463fd8922c16dc0a18fcb26f3_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8 | mtr/mtr-web-container-rhel8@sha256:01aff83b56ddcb52aa891defe2e9a68c41ef33f463fd8922c16dc0a18fcb26f3_s390x |
Timeline
- May 31, 2023 CVE Published
- Mar 27, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:3373 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2151988 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2153379 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2185707 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3373.json advisory
- https://access.redhat.com/security/cve/CVE-2021-46877 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-46877 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-46877 advisory
- https://access.redhat.com/security/cve/CVE-2022-41854 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41854 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41854 advisory
- https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355 advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355 advisory
- https://access.redhat.com/security/cve/CVE-2022-41881 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-41881 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41881 advisory