412 matches found
Objective: Open CBOR Run-time security vulnerability
Objective Open CBOR Run-time oocborrt is an open source C code library. It should be used for coding and decoding functions for data in the CBOR format. A security vulnerability exists in run-time that stems from. The run-time environment installer adds a firewall rule called Sentinel License...
OESA-2021-1140 jackson-dataformats-binary security update
This module is a multi-module umbrella project for Jackson standard binary dataformat backends. Dataformat backends are used to support format alternatives to JSON, using general-purpose Jackson API. Formats included allow access using all 3 API styles streaming, databinding, tree model. Security...
jackson-dataformats-binary:CborFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOf
Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=4680561995153408 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: CborFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Crash...
DEBIAN-CVE-2020-28491
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
UBUNTU-CVE-2020-28491
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
CVE-2020-28491 Denial of Service (DoS)
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
CVE-2020-28491
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
ai.hyacinth.framework:core-service-discovery-server (>=0.5.0, <=0.5.24), ai.lum:odinson-rest-api_2.12 (>=0.3.1, <=0.5.0) +4009 more potentially affected by CVE-2020-28491 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.8.0.rc1, <=2.11.3)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.8.0.rc1, =0.5.0, =0.3.1, =j8.2.2.0, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =2.8.0, =2.8.0, =2.8.0, =2.8.0, =0.1.2, =0.1.2, =0.2.5 and more Source cves: CVE-2020-28491 Source advisory: MEND:CVE-2020-2849...
com.fasterxml.jackson.jaxrs:jackson-jaxrs-cbor-provider (>=2.12.0-rc1, <=2.12.0), com.hack23.cia:service.data.impl (>=2020-10-29, <=2020.12.20) +27 more potentially affected by CVE-2020-28491 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.12.0-rc1, <=2.12.0)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.12.0-rc1, =2.12.0-rc1, =2020-10-29, =2020-10-29, =0.26.3, =0.26.3, =0.23.1, =1.11.911, =1.11.911, =1.11.922 - org.n52.sensorweb-server.sos:sos-statistics 6.0.0-pr.1 and more Source cves: CVE-2020-28491 Source advisory:...
CVE-2020-28491
CVE-2020-28491 affects the jackson-dataformat-cbor component. An unchecked allocation of byte buffers can lead to java.lang.OutOfMemoryError. Affected versions include 0 and earlier than 2.11.4, and 2.12.0-rc1 and earlier than 2.12.1. The issue is tied to the data format CBOR handling (byte buffe...
CVE-2020-28491
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
FasterXML Jackson Resource Management Error Vulnerability
FasterXML Jackson is a data processing tool for Java from FasterXML, Inc. A resource management error vulnerability exists in FasterXML Jackson. The vulnerability stems from a failure to check the buffer length in jackson-dataformat-cbor resulting in an OutOfMemoryError exception being thrown. Th...
CVE-2020-28491: Allocation of Resources Without Limits or Throttling
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...
PT-2021-7974
Name of the Vulnerable Software and Affected Versions com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 0 through 2.11.4 com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 2.12.0-rc1 through 2.12.1 Description The issue is related to the allocation of unlimited memo...
ai.faculty:dynamic-configuration_2.11 (>=0.3.2, <=0.3.3), ai.faculty:dynamic-configuration_2.13 (0.4.0) +7484 more potentially affected by CVE-2020-28491 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.3.2, <=2.11.3)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.3.2, =0.3.2, =3.22.0.1, =2.1.42, =3.30.0.5-1-3.0, =2.1.42, =3.30.0.5-1-3.0, =2.1.42, =3.30.0.5-1-3.0, =2.1.42, =0.5.0, =0.3.1, =1.11.0, =1.11.0, =1.11.0, =1.13.8 and more Source cves: CVE-2020-28491 Source advisory:...
com.fasterxml.jackson.jaxrs:jackson-jaxrs-cbor-provider (>=2.12.0-rc1, <=2.12.0), com.hack23.cia:service.data.impl (>=2020-10-29, <=2020.12.20) +27 more potentially affected by CVE-2020-28491 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.12.0-rc1, <=2.12.0)
com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.12.0-rc1, =2.12.0-rc1, =2020-10-29, =2020-10-29, =0.26.3, =0.26.3, =0.23.1, =1.11.911, =1.11.911, =1.11.922 - org.n52.sensorweb-server.sos:sos-statistics 6.0.0-pr.1 and more Source cves: CVE-2020-28491 Source advisory:...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
UBUNTU-CVE-2019-25001
An issue was discovered in the serdecbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags...
