VDB
SUSE-SU-2022%3A1678-1
SUSE-SU-2022%3A1678-1
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE Linux Enterprise Server 15 SP2-BCL | ||
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | ||
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | ||
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | ||
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | ||
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | ||
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | ||
| SUSE Linux Enterprise Server 15 SP2-LTSS | ||
| jackson | ||
| SUSE Linux Enterprise Real Time 15 SP2 |
Timeline
- May 16, 2022 CVE Published
- Feb 8, 2024 PoC Published
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_1678-1.json advisory
- https://www.suse.com/support/update/announcement/2022/suse-su-20221678-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-May/011022.html advisory
- https://bugzilla.suse.com/1177616 advisory
- https://bugzilla.suse.com/1182481 advisory
- https://bugzilla.suse.com/1197132 advisory
- https://www.suse.com/security/cve/CVE-2020-25649/ advisory
- https://www.suse.com/security/cve/CVE-2020-28491/ advisory
- https://www.suse.com/security/cve/CVE-2020-36518/ advisory