Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:9032
HistoryDec 15, 2022 - 12:38 p.m.

(RHSA-2022:9032) Important: Red Hat build of Eclipse Vert.x 4.3.4 security update

2022-12-1512:38:08
access.redhat.com
22

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON

This release of Red Hat build of Eclipse Vert.x 4.3.4 GA includes security updates. For more information, see the release notes listed in the References section.

Security Fix(es):

  • snakeyaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  • jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS (CVE-2022-42003)

  • jackson-databind: use of deeply nested arrays (CVE-2022-42004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.

Related

nessus 27
ibm 85
openvas 4
gentoo 1
debian 2
osv 13
mageia 1
redhat 13
prion 4
atlassian 11
cve 4
veracode 3
github 4
f5 3
broadcom 2
ubuntucve 3
debiancve 3
redhatcve 3
hackerone 1
oraclelinux 1
cgr 1
githubexploit 1
rocky 1
almalinux 1
freebsd 1
thn 1
packetstorm 1
metasploit 1
zdt 1
rapid7blog 1
hivepro 1
nessus
nessus
GLSA-202210-21 : FasterXML jackson-databind: Multiple vulnerabilities
2022-10-31 00:00:00
SUSE SLED15 / SLES15 Security Update : jackson-databind (SUSE-SU-2022:3995-1)
2022-11-16 00:00:00
Oracle GoldenGate (April 2023 CPU)
2023-04-19 00:00:00
ibm
ibm
Security Bulletin: FasterXML jackson-databind is vulnerable to CVE-2022-42003 and CVE-2022-42004 used in IBM Maximo Application Suite
2023-05-02 17:56:02
Security Bulletin: Maximo Application Suite is vulnerable to CVE-2022-42003 and CVE-2022-42004 per jackson-databind dependency
2023-03-24 21:44:35
Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (CVE-2022-42003, CVE-2022-42004)
2023-01-30 09:20:59
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3995-1)
2022-11-16 00:00:00
Mageia: Security Advisory (MGASA-2024-0069)
2024-03-18 00:00:00
Debian: Security Advisory (DSA-5283-1)
2022-11-18 00:00:00
gentoo
gentoo
FasterXML jackson-databind: Multiple vulnerabilities
2022-10-31 00:00:00
debian
debian
[SECURITY] [DLA 3207-1] jackson-databind security update
2022-11-27 18:53:52
[SECURITY] [DSA 5283-1] jackson-databind security update
2022-11-17 11:17:07
osv
osv
jackson-databind - security update
2022-11-17 00:00:00
jackson-databind - security update
2022-11-27 00:00:00
CVE-2022-42003
2022-10-02 05:15:09
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2024-03-16 19:28:17
redhat
redhat
(RHSA-2023:1006) Important: Red Hat build of Quarkus 2.7.7 release and security update
2023-03-08 14:51:11
(RHSA-2022:9058) Important: prometheus-jmx-exporter security update
2022-12-15 15:08:09
(RHSA-2023:0471) Important: Migration Toolkit for Runtimes security update
2023-01-26 12:13:39
prion
prion
Code injection
2022-10-02 05:15:00
Deserialization of untrusted data
2022-10-02 05:15:00
Deserialization of untrusted data
2022-12-01 11:15:00
atlassian
atlassian
FasterXML Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:45:26
Deserialization com.fasterxml.jackson.core:jackson-databind in Jira Software Data Center and Server
2023-11-12 13:45:26
FasterXML Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:45:05
cve
cve
CVE-2022-42004
2022-10-02 05:15:00
CVE-2022-42003
2022-10-02 05:15:00
CVE-2022-1471
2022-12-01 11:15:00
veracode
veracode
Denial Of Service (DoS)
2022-10-03 04:26:32
Denial Of Service (DoS)
2022-10-03 10:42:53
Remote Code Execution (RCE)
2022-12-02 17:22:00
github
github
Uncontrolled Resource Consumption in FasterXML jackson-databind
2022-10-03 00:00:31
Uncontrolled Resource Consumption in Jackson-databind
2022-10-03 00:00:31
SnakeYaml Constructor Deserialization Remote Code Execution
2022-12-12 21:19:47
f5
f5
K000132725 : FasterXML vulnerability CVE-2022-42004
2023-03-22 00:00:00
K000135852 : FasterXML jackson-databind vulnerability CVE-2022-42003
2023-08-15 00:00:00
K000132638 : SnakeYAML vulnerability CVE-2022-1471
2023-02-16 00:00:00
broadcom
broadcom
CVE-2022-42004 -In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur
2023-05-03 00:00:00
CVE-2022-42003 - In FasterXML jackson-databind before 2.14.0-rc1, ressource exhaustion
2023-05-03 00:00:00
ubuntucve
ubuntucve
CVE-2022-42004
2022-10-02 00:00:00
CVE-2022-42003
2022-10-02 00:00:00
CVE-2022-1471
2022-12-01 00:00:00
debiancve
debiancve
CVE-2022-42004
2022-10-02 05:15:00
CVE-2022-42003
2022-10-02 05:15:00
CVE-2022-1471
2022-12-01 11:15:00
redhatcve
redhatcve
CVE-2022-42004
2022-10-17 07:01:06
CVE-2022-42003
2022-10-17 07:01:04
CVE-2022-1471
2022-12-01 15:56:23
hackerone
hackerone
Kubernetes: The `io.kubernetes.client.util.generic.dynamic.Dynamics` contains a code execution vulnerability due to SnakeYAML
2022-12-15 19:07:04
oraclelinux
oraclelinux
prometheus-jmx-exporter security update
2022-12-15 00:00:00
cgr
cgr
CVE-2022-1471 vulnerabilities
2024-04-23 09:06:29
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Snakeyaml Project Snakeyaml
2023-03-02 16:33:02
rocky
rocky
prometheus-jmx-exporter security update
2022-12-15 15:08:09
almalinux
almalinux
Important: prometheus-jmx-exporter security update
2022-12-15 00:00:00
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00
thn
thn
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
2023-10-03 16:24:00
packetstorm
packetstorm
PyTorch Model Server Registration / Deserialization Remote Code Execution
2023-10-13 00:00:00
metasploit
metasploit
PyTorch Model Server Registration and Deserialization RCE
2023-10-12 13:27:26
zdt
zdt
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
2023-10-15 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-10-13 17:03:36
hivepro
hivepro
Atlassian Addresses Critical RCE Flaws
2023-12-07 12:45:52

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.5%

JSON
Related for RHSA-2022:9032
nessus27ibm85openvas4gentoo1debian2osv13mageia1redhat13prion4atlassian11cve4veracode3github4f53broadcom2ubuntucve3debiancve3redhatcve3hackerone1oraclelinux1cgr1githubexploit1rocky1almalinux1freebsd1thn1packetstorm1metasploit1zdt1rapid7blog1hivepro1