3811 matches found
CVE-2018-12023
The CVE-2018-12023 issue affects FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (globally or per-property) and the Oracle JDBC jar is in the classpath with an LDAP service accessible to an attacker, the service could be coerced into executing a ma...
Unspecified vulnerability in FasterXML jackson-databind
FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind versions prior to 2.7.9.4, prior to 2.8.11.2, and prior to 2.9.6. An attacker can...
Security Bulletin: Multiple vulnerabilities have been identified in FasterXML Jackson library shipped with IBM Tivoli Netcool/OMNIbus Common Integration Libraries (CVE-2018-19360, CVE-2018-19361, CVE-2018-19362, CVE-2018-1000873)
Summary FasterXML Jackson library is shipped as a component of IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Transformer for Message Bus Integration. Information about security vulnerabilities affecting FasterXML Jackson library has been published. The Netcool/OMNIbus...
Debian DLA-1703-1 : jackson-databind security update
Several deserialization flaws were discovered in jackson-databind, a fast and powerful JSON library for Java, which could allow an unauthenticated user to perform code execution. The issue was resolved by extending the blacklist and blocking more classes from polymorphic deserialization. For Debi...
[SECURITY] [DLA 1703-1] jackson-databind security update
Package : jackson-databind Version : 2.4.2-2+deb8u5 CVE ID : CVE-2018-11307 CVE-2018-12022 CVE-2018-12023 CVE-2018-14718 CVE-2018-14719 CVE-2018-14720 CVE-2018-14721 CVE-2018-19360 CVE-2018-19361 CVE-2018-19362 Several deserialization flaws were discovered in jackson-databind, a fast and powerful...
DLA-1703-1 jackson-databind - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1703-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Public disclosed vulnerabilities from Jackson-databind affects IBM Spectrum LSF
Summary Public disclosed vulnerabilities from Jackson-databind affects IBM Spectrum LSF: CVE-2017-7525, CVE-2017-15095, CVE-2017-17485, CVE-2018-5968, CVE-2018-7489 Vulnerability Details CVE-2017-7525 Jackson-databind Also implemented in JBoss BPM Suite is vulnerable to remote code execution when...
Security Bulletin: Multiple vulnerabilities affect IBM Cloud Object Storage SDK Java (Feb 2019, updated)
Summary Multiple vulnerabilities affect IBM Cloud Object Storage SDK Java. These vulnerabilities have been addressed in the latest SDK Java releases. Vulnerability Details CVE-ID: CVE-2018-19362 Description: An unspecified error with failure to block the jboss-common-core class from polymorphic...
Unsafe Dependency Resolution
Overview com.fasterxml.jackson.module:jackson-module-scala is an Add-on module for Jackson http://wiki.fasterxml.com/JacksonHome to support Scala-specific datatypes. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure...
FasterXML Jackson-databind code issue vulnerability (CNVD-2019-37150)
FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind versions prior to 2.7.9.4, prior to 2.8.11.2, and prior to 2.9.6. An attacker can...
[SECURITY] Fedora 29 Update: jackson-dataformat-xml-2.9.8-1.fc29
Data format extension for Jackson http://jackson.codehaus.org to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs. Support implemented on top of Stax API javax.xml.stream, by implementing core Jackson Streaming API types like JsonGenerator, JsonParser and...
[SECURITY] Fedora 29 Update: jackson-datatype-joda-2.9.8-1.fc29
This is a Jackson module that aims to provide full support for data types of Joda date-time library...
[SECURITY] Fedora 29 Update: jackson-datatype-jdk8-2.9.8-1.fc29
Java 8 Datatypes: support for other new Java 8 data types outside of date/time: most notably Optional, OptionalLong, OptionalDouble...
[SECURITY] Fedora 29 Update: jackson-datatypes-collections-2.9.8-1.fc29
This is a multi-module umbrella project for various Jackson Data-type modules to support 3rd party Collection libraries. Currently included are: Guava data-type HPPC data-type PCollections data-type...
[SECURITY] Fedora 29 Update: jackson-modules-base-2.9.8-1.fc29
Jackson "base" modules: modules that build directly on databind, and are not data-type, data format, or JAX-RS provider modules...
[SECURITY] Fedora 29 Update: jackson-parent-2.9.1.2-1.fc29
Project for parent pom for all Jackson components...
[SECURITY] Fedora 29 Update: jackson-jaxrs-providers-2.9.8-1.fc29
This is a multi-module project that contains Jackson-based JAX-RS providers for following data formats: JSON, Smile binary JSON, XML, CBOR another kind of binary JSON, YAML...