Red Hat Security AdvisoryRHSA-2017:3189
rh-eclipse47-jackson-databind security update
Released 2017-11-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Developer Tools for Red Hat Enterprise Linux Server (v. 7) rh-eclipse47-jackson-databind-2.7.6-3.3.el7, rh-eclipse47-jackson-databind-javadoc-2.7.6-3.3.el7
- Red Hat Developer Tools for Red Hat Enterprise Linux Workstation (v. 7) rh-eclipse47-jackson-databind-2.7.6-3.3.el7, rh-eclipse47-jackson-databind-javadoc-2.7.6-3.3.el7
Fixes 1 record
Priority MEDIUM 60
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readV…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08357 · Published 2018-02-06 · Partial fix · 2.8.10, 2.9.1 +4 CWE-184
