Lucene search

Arbitrary Code Execution in jackson-databind

🗓️ 04 Jan 2019 19:49:09Reported by GitHub Advisory DatabaseType

Arbitrary Code Execution in jackson-databind version 2.

Reporter	Title	Published	Views	Family All 109
Prion	Deserialization of untrusted data	2 Jan 201918:29	–	prion
RedhatCVE	CVE-2018-14719	13 Jun 202106:35	–	redhatcve
CVE	CVE-2018-14719	2 Jan 201918:29	–	cve
Cvelist	CVE-2018-14719	2 Jan 201918:00	–	cvelist
Debian CVE	CVE-2018-14719	2 Jan 201918:29	–	debiancve
NVD	CVE-2018-14719	2 Jan 201918:29	–	nvd
UbuntuCve	CVE-2018-14719	2 Jan 201900:00	–	ubuntucve
OSV	CVE-2018-14719	2 Jan 201918:29	–	osv
OSV	Arbitrary Code Execution in jackson-databind	4 Jan 201919:09	–	osv
OSV	jackson-databind - security update	4 Mar 201900:00	–	osv

Vulners

Node

com.fasterxml.jackson.core jackson-databindRange2.0.0–2.7.9.4

com.fasterxml.jackson.core jackson-databindRange2.8.0–2.8.11.2

com.fasterxml.jackson.core jackson-databindRange2.9.0–2.9.7

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-14719
github	www.github.com/FasterXML/jackson-databind/issues/2097
github	www.github.com/FasterXML/jackson-databind/commit/87d29af25e82a249ea15858e2d4ecbf64091db44
access	www.access.redhat.com/errata/RHBA-2019:0959
access	www.access.redhat.com/errata/RHSA-2019:0782
access	www.access.redhat.com/errata/RHSA-2019:0877
access	www.access.redhat.com/errata/RHSA-2019:1782
access	www.access.redhat.com/errata/RHSA-2019:1797
access	www.access.redhat.com/errata/RHSA-2019:1822
access	www.access.redhat.com/errata/RHSA-2019:1823

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2019 19:09Current

9.6High risk

Vulners AI Score9.6

CVSS27.5

CVSS39.8

EPSS0.024

CWE-502