The vulnerability of the jackson-databind library, related to unlimited resource distribution, allows attackers to cause service failures.

🗓️ 06 Jan 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The jackson-databind library vulnerability allows unlimited resource distribution that can cause service failures.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in FasterXML jackson-databind	2 May 202322:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilities	9 Feb 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in FasterXML jackson-databind shipped with IBM Tivoli Netcool Impact (CVE-2021-46877)	21 Jun 202315:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java	8 Jul 202420:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	8 Nov 202515:57	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to denial of service due to jackson-databind package	10 Mar 202515:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jackson-databind affects watsonx.data	14 Aug 202415:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in FasterXML jackson-databind	23 Jun 202606:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in FasterXML jackson-databind	27 Jan 202606:51	–	ibm

Vulners

Node

red_hat red_hat_jboss_fuseMatch7

red_hat red_hat_jboss_fuseMatch6

red_hat red_hat_jboss_data_virtualizationMatch6

red_hat red_hat_jboss_data_gridMatch7

red_hat jboss_enterprise_application_platformMatch6

red_hat red_hat_data_gridMatch8

red_hat red_hat_jboss_fuse_service_worksMatch6

red_hat red_hat_openshift_container_platformMatch3.11

red_hat red_hat_openshift_container_platformMatch4

red_hat decision_managerMatch7

red_hat cryostatMatch2

red_hat red_hat_jboss_enterprise_application_platformMatch7

red_hat migration_toolkit_for_runtimesMatch1

red_hat red_hat_jboss_enterprise_application_platformMatch6

red_hat openshift_developer_tools_and_services_for_ocpMatch4.13

red_hat red_hat_amq_streamsMatch2.4.0

red_hat openshift_developer_tools_and_services_for_ocpMatch4.12

fasterxml,_llc jackson-databindRange2.10.0–2.12.6

fasterxml,_llc jackson-databindMatch2.13.0

red_hat red_hat_single_sign-onMatch7.6.5

red_hat red_hat_support_for_spring_bootMatch2.7.13

red_hat red_hat_integration_camel_for_spring_bootMatch3.18.3.2

red_hat red_hat_enterprise_linuxMatch8

red_hat red_hat_enterprise_linuxMatch9

Source	Link
github	www.github.com/FasterXML/jackson-databind/issues/3328
groups	www.groups.google.com/g/jackson-user/c/OsBsirPM_Vw
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-46877
access	www.access.redhat.com/security/cve/CVE-2021-46877
abf	www.abf.rosa.ru/advisories/ROSA-SA-2026-3187
abf	www.abf.rosa.ru/advisories/ROSA-SA-2026-3167
web	www.web.nvd.nist.gov/view/vuln/detail

01 Jun 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 37.5

CVSS 27.8

EPSS0.01124