Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202210-21
HistoryOct 31, 2022 - 12:00 a.m.

FasterXML jackson-databind: Multiple vulnerabilities

2022-10-3100:00:00
Gentoo Foundation
security.gentoo.org
26

0.003 Low

EPSS

Percentile

66.1%

JSON

Background

FasterXML jackson-databind is a general data-binding package for Jackson (2.x) which works on streaming API (core) implementation(s).

Description

Multiple vulnerabilities have been discovered in FasterXML jackson-databind. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All FasterXML jackson-databind users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-java/jackson-databind-2.13.4.1"
OSVersionArchitecturePackageVersionFilename
Gentooanyalldev-java/jackson-databind< 2.13.4.1UNKNOWN

Related

nessus 39
ibm 84
openvas 4
debian 2
mageia 1
osv 6
redhat 28
wolfi 2
cgr 2
atlassian 9
cve 2
prion 2
redhatcve 2
f5 2
veracode 2
cvelist 2
github 2
broadcom 2
debiancve 2
ubuntucve 2
freebsd 1
rocky 1
nessus
nessus
GLSA-202210-21 : FasterXML jackson-databind: Multiple vulnerabilities
2022-10-31 00:00:00
SUSE SLED15 / SLES15 Security Update : jackson-databind (SUSE-SU-2022:3995-1)
2022-11-16 00:00:00
Oracle GoldenGate (April 2023 CPU)
2023-04-19 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (CVE-2022-42003, CVE-2022-42004)
2023-01-30 09:20:59
Security Bulletin: IBM MQ is affected by FasterXML jackson-databind vulnerabilities (CVE-2022-42003, CVE-2022-42004)
2023-02-02 12:40:32
Security Bulletin: Maximo Application Suite is vulnerable to CVE-2022-42003 and CVE-2022-42004 per jackson-databind dependency
2023-03-24 21:44:35
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3995-1)
2022-11-16 00:00:00
Debian: Security Advisory (DSA-5283-1)
2022-11-18 00:00:00
Mageia: Security Advisory (MGASA-2024-0069)
2024-03-18 00:00:00
debian
debian
[SECURITY] [DLA 3207-1] jackson-databind security update
2022-11-27 18:54:15
[SECURITY] [DSA 5283-1] jackson-databind security update
2022-11-17 11:33:20
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2024-03-16 19:28:17
osv
osv
jackson-databind - security update
2022-11-17 00:00:00
jackson-databind - security update
2022-11-27 00:00:00
CVE-2022-42003
2022-10-02 05:15:09
redhat
redhat
(RHSA-2022:9032) Important: Red Hat build of Eclipse Vert.x 4.3.4 security update
2022-12-15 12:38:08
(RHSA-2023:0189) Moderate: Red Hat AMQ Streams 2.3.0 release and security update
2023-01-17 11:45:43
(RHSA-2023:0471) Important: Migration Toolkit for Runtimes security update
2023-01-26 12:13:39
wolfi
wolfi
CVE-2022-42004 vulnerabilities
2024-05-29 03:07:31
CVE-2022-42003 vulnerabilities
2024-05-29 03:07:31
cgr
cgr
CVE-2022-42004 vulnerabilities
2024-05-19 03:07:16
CVE-2022-42003 vulnerabilities
2024-05-19 03:07:16
atlassian
atlassian
FasterXML Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:45:26
FasterXML Vulnerability in Bitbucket Data Center and Server
2023-10-06 17:45:05
DoS (Denial of Service) com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server
2024-04-09 01:54:04
cve
cve
CVE-2022-42004
2022-10-02 05:15:00
CVE-2022-42003
2022-10-02 05:15:00
prion
prion
Code injection
2022-10-02 05:15:00
Deserialization of untrusted data
2022-10-02 05:15:00
redhatcve
redhatcve
CVE-2022-42004
2022-10-17 07:01:06
CVE-2022-42003
2022-10-17 07:01:04
f5
f5
K000132725 : FasterXML vulnerability CVE-2022-42004
2023-03-22 00:00:00
K000135852 : FasterXML jackson-databind vulnerability CVE-2022-42003
2023-08-15 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-10-03 04:26:32
Denial Of Service (DoS)
2022-10-03 10:42:53
cvelist
cvelist
CVE-2022-42004
2022-10-02 00:00:00
CVE-2022-42003
2022-10-02 00:00:00
github
github
Uncontrolled Resource Consumption in FasterXML jackson-databind
2022-10-03 00:00:31
Uncontrolled Resource Consumption in Jackson-databind
2022-10-03 00:00:31
broadcom
broadcom
CVE-2022-42004 -In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur
2023-05-03 00:00:00
CVE-2022-42003 - In FasterXML jackson-databind before 2.14.0-rc1, ressource exhaustion
2023-05-03 00:00:00
debiancve
debiancve
CVE-2022-42004
2022-10-02 05:15:00
CVE-2022-42003
2022-10-02 05:15:00
ubuntucve
ubuntucve
CVE-2022-42004
2022-10-02 00:00:00
CVE-2022-42003
2022-10-02 00:00:00
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00
rocky
rocky
Satellite 6.13 Release
2023-05-05 15:39:58

0.003 Low

EPSS

Percentile

66.1%

JSON
Related for GLSA-202210-21
nessus39ibm84openvas4debian2mageia1osv6redhat28wolfi2cgr2atlassian9cve2prion2redhatcve2f52veracode2cvelist2github2broadcom2debiancve2ubuntucve2freebsd1rocky1