logo
DATABASE RESOURCES PRICING ABOUT US

Deserialization of Untrusted Data in FasterXML jackson-databind

Description

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.


Affected Software


CPE Name Name Version
com.fasterxml.jackson.core:jackson-databind 2.0.0
com.fasterxml.jackson.core:jackson-databind 2.0.0-RC1
com.fasterxml.jackson.core:jackson-databind 2.0.0-RC2
com.fasterxml.jackson.core:jackson-databind 2.0.0-RC3
com.fasterxml.jackson.core:jackson-databind 2.0.1
com.fasterxml.jackson.core:jackson-databind 2.0.2
com.fasterxml.jackson.core:jackson-databind 2.0.4
com.fasterxml.jackson.core:jackson-databind 2.0.5
com.fasterxml.jackson.core:jackson-databind 2.0.6
com.fasterxml.jackson.core:jackson-databind 2.1.0
com.fasterxml.jackson.core:jackson-databind 2.1.1
com.fasterxml.jackson.core:jackson-databind 2.1.2
com.fasterxml.jackson.core:jackson-databind 2.1.3
com.fasterxml.jackson.core:jackson-databind 2.1.4
com.fasterxml.jackson.core:jackson-databind 2.1.5
com.fasterxml.jackson.core:jackson-databind 2.2.0
com.fasterxml.jackson.core:jackson-databind 2.2.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.2.1
com.fasterxml.jackson.core:jackson-databind 2.2.2
com.fasterxml.jackson.core:jackson-databind 2.2.3
com.fasterxml.jackson.core:jackson-databind 2.2.4
com.fasterxml.jackson.core:jackson-databind 2.3.0
com.fasterxml.jackson.core:jackson-databind 2.3.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.3.1
com.fasterxml.jackson.core:jackson-databind 2.3.2
com.fasterxml.jackson.core:jackson-databind 2.3.3
com.fasterxml.jackson.core:jackson-databind 2.3.4
com.fasterxml.jackson.core:jackson-databind 2.3.5
com.fasterxml.jackson.core:jackson-databind 2.4.0
com.fasterxml.jackson.core:jackson-databind 2.4.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.4.0-rc2
com.fasterxml.jackson.core:jackson-databind 2.4.0-rc3
com.fasterxml.jackson.core:jackson-databind 2.4.1
com.fasterxml.jackson.core:jackson-databind 2.4.1.1
com.fasterxml.jackson.core:jackson-databind 2.4.1.2
com.fasterxml.jackson.core:jackson-databind 2.4.1.3
com.fasterxml.jackson.core:jackson-databind 2.4.2
com.fasterxml.jackson.core:jackson-databind 2.4.3
com.fasterxml.jackson.core:jackson-databind 2.4.4
com.fasterxml.jackson.core:jackson-databind 2.4.5
com.fasterxml.jackson.core:jackson-databind 2.4.5.1
com.fasterxml.jackson.core:jackson-databind 2.4.6
com.fasterxml.jackson.core:jackson-databind 2.4.6.1
com.fasterxml.jackson.core:jackson-databind 2.5.0
com.fasterxml.jackson.core:jackson-databind 2.5.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.5.1
com.fasterxml.jackson.core:jackson-databind 2.5.2
com.fasterxml.jackson.core:jackson-databind 2.5.3
com.fasterxml.jackson.core:jackson-databind 2.5.4
com.fasterxml.jackson.core:jackson-databind 2.5.5
com.fasterxml.jackson.core:jackson-databind 2.6.0
com.fasterxml.jackson.core:jackson-databind 2.6.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.6.0-rc2
com.fasterxml.jackson.core:jackson-databind 2.6.0-rc3
com.fasterxml.jackson.core:jackson-databind 2.6.0-rc4
com.fasterxml.jackson.core:jackson-databind 2.6.1
com.fasterxml.jackson.core:jackson-databind 2.6.2
com.fasterxml.jackson.core:jackson-databind 2.6.3
com.fasterxml.jackson.core:jackson-databind 2.6.4
com.fasterxml.jackson.core:jackson-databind 2.6.5
com.fasterxml.jackson.core:jackson-databind 2.6.6
com.fasterxml.jackson.core:jackson-databind 2.6.7
com.fasterxml.jackson.core:jackson-databind 2.6.7.1
com.fasterxml.jackson.core:jackson-databind 2.6.7.2
com.fasterxml.jackson.core:jackson-databind 2.6.7.3
com.fasterxml.jackson.core:jackson-databind 2.6.7.4
com.fasterxml.jackson.core:jackson-databind 2.6.7.5
com.fasterxml.jackson.core:jackson-databind 2.7.0
com.fasterxml.jackson.core:jackson-databind 2.7.0-rc1
com.fasterxml.jackson.core:jackson-databind 2.7.0-rc2
com.fasterxml.jackson.core:jackson-databind 2.7.0-rc3
com.fasterxml.jackson.core:jackson-databind 2.7.1
com.fasterxml.jackson.core:jackson-databind 2.7.1-1
com.fasterxml.jackson.core:jackson-databind 2.7.2
com.fasterxml.jackson.core:jackson-databind 2.7.3
com.fasterxml.jackson.core:jackson-databind 2.7.4
com.fasterxml.jackson.core:jackson-databind 2.7.5
com.fasterxml.jackson.core:jackson-databind 2.7.6
com.fasterxml.jackson.core:jackson-databind 2.7.7
com.fasterxml.jackson.core:jackson-databind 2.7.8
com.fasterxml.jackson.core:jackson-databind 2.7.9
com.fasterxml.jackson.core:jackson-databind 2.7.9.1
com.fasterxml.jackson.core:jackson-databind 2.7.9.2
com.fasterxml.jackson.core:jackson-databind 2.7.9.3
com.fasterxml.jackson.core:jackson-databind 2.7.9.4
com.fasterxml.jackson.core:jackson-databind 2.7.9.5
com.fasterxml.jackson.core:jackson-databind 2.7.9.6
com.fasterxml.jackson.core:jackson-databind 2.7.9.7
com.fasterxml.jackson.core:jackson-databind 2.8.0
com.fasterxml.jackson.core:jackson-databind 2.8.0.rc1
com.fasterxml.jackson.core:jackson-databind 2.8.0.rc2
com.fasterxml.jackson.core:jackson-databind 2.8.1
com.fasterxml.jackson.core:jackson-databind 2.8.10
com.fasterxml.jackson.core:jackson-databind 2.8.11
com.fasterxml.jackson.core:jackson-databind 2.8.11.1
com.fasterxml.jackson.core:jackson-databind 2.8.11.2
com.fasterxml.jackson.core:jackson-databind 2.8.11.3
com.fasterxml.jackson.core:jackson-databind 2.8.11.4
com.fasterxml.jackson.core:jackson-databind 2.8.11.5
com.fasterxml.jackson.core:jackson-databind 2.8.11.6
com.fasterxml.jackson.core:jackson-databind 2.8.2
com.fasterxml.jackson.core:jackson-databind 2.8.3
com.fasterxml.jackson.core:jackson-databind 2.8.4
com.fasterxml.jackson.core:jackson-databind 2.8.5
com.fasterxml.jackson.core:jackson-databind 2.8.6
com.fasterxml.jackson.core:jackson-databind 2.8.7
com.fasterxml.jackson.core:jackson-databind 2.8.8
com.fasterxml.jackson.core:jackson-databind 2.8.8.1
com.fasterxml.jackson.core:jackson-databind 2.8.9
com.fasterxml.jackson.core:jackson-databind 2.9.0
com.fasterxml.jackson.core:jackson-databind 2.9.0.pr1
com.fasterxml.jackson.core:jackson-databind 2.9.0.pr2
com.fasterxml.jackson.core:jackson-databind 2.9.0.pr3
com.fasterxml.jackson.core:jackson-databind 2.9.0.pr4
com.fasterxml.jackson.core:jackson-databind 2.9.1
com.fasterxml.jackson.core:jackson-databind 2.9.2
com.fasterxml.jackson.core:jackson-databind 2.9.3
com.fasterxml.jackson.core:jackson-databind 2.9.4
com.fasterxml.jackson.core:jackson-databind 2.9.5
com.fasterxml.jackson.core:jackson-databind 2.9.6
com.fasterxml.jackson.core:jackson-databind 2.9.7
com.fasterxml.jackson.core:jackson-databind 2.9.8
com.fasterxml.jackson.core:jackson-databind 2.9.9

Related