CVE-2020-28491

CVE-2020-28491 affects the jackson-dataformat-cbor component. An unchecked allocation of byte buffers can lead to java.lang.OutOfMemoryError. Affected versions include 0 and earlier than 2.11.4, and 2.12.0-rc1 and earlier than 2.12.1. The issue is tied to the data format CBOR handling (byte buffe...

FasterXML Jackson Resource Management Error Vulnerability

FasterXML Jackson is a data processing tool for Java from FasterXML, Inc. A resource management error vulnerability exists in FasterXML Jackson. The vulnerability stems from a failure to check the buffer length in jackson-dataformat-cbor resulting in an OutOfMemoryError exception being thrown. Th...

PT-2021-7974 · Fasterxml +2 · Jackson Dataformat Cbor +2

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 0 through 2.11.4 com.fasterxml.jackson.dataformat:jackson-dataformat-cbor versions 2.12.0-rc1 through 2.12.1 Description: The issue is related to the allocation of unlimited...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...