Red Hat Security Advisory

RHSA-2019:3200

Red Hat AMQ Streams 1.3.0 release and security update

Released 2019-10-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat AMQ Streams 1

Fixes 8 records

TI-2019-10835 CVE-2019-14540 · GHSA-h822-r4r5-v8jg

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

MEDIUM 62

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10763 Published 2019-09-15 Partial fix · 2.9.10, 2.8.11.5 +1 CWE-502

TI-2019-09232 CVE-2019-12384 · GHSA-mph4-vhrx-mv67

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of…

MEDIUM 62

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.45205 Published 2019-06-24 Partial fix · 2.9.9.1, 2.8.11.4 +2 CWE-502

TI-2019-10718 CVE-2019-14379 · GHSA-6fpp-rgj9-8rwc

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default…

MEDIUM 60

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08111 Published 2019-07-29 Partial fix · 2.9.9.2, 2.8.11.4 +1 CWE-1321

TI-2019-09017 CVE-2019-12086 · GHSA-5ww9-j83m-q7qx

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.

MEDIUM 58

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.21949 Published 2019-05-17 Partial fix · 2.9.9, 2.8.11.4 +2 CWE-502

TI-2019-12294 CVE-2019-16335 · GHSA-85cw-hj65-qqv9

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

MEDIUM 57

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04918 Published 2019-09-15 Partial fix · 2.9.10, 2.8.11.5 +1 CWE-502

TI-2019-10766 CVE-2019-14439 · GHSA-gwp4-hfv6-p7hw

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before…

MEDIUM 52

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1085 Published 2019-07-30 Partial fix · 2.9.9.2, 2.8.11.4 +2 CWE-502

TI-2019-12882 CVE-2019-17267 · GHSA-f3j5-rmmp-3fc5

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

MEDIUM 50

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04628 Published 2019-10-06 Partial fix · 2.9.10, 2.8.11.5 CWE-502

TI-2019-09596 CVE-2019-12814 · GHSA-cmfg-87vq-g5g4

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9.

LOW 39

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.10902 Published 2019-06-19 Partial fix · 2.9.9.1, 2.8.11.4 +2 CWE-502