In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Debian
Subscribe
|
Debian Linux
Subscribe
|
|
Fasterxml
Subscribe
|
Jackson-databind
Subscribe
|
|
Netapp
Subscribe
|
Oncommand Workflow Automation
Subscribe
|
|
Quarkus
Subscribe
|
Quarkus
Subscribe
|
|
Redhat
Subscribe
|
Amq Broker
Subscribe
Amq Streams
Subscribe
Camel Quarkus
Subscribe
Camel Spring Boot
Subscribe
Jboss Data Grid
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Application Platform Eus
Subscribe
Jboss Enterprise Bpms Platform
Subscribe
Logging
Subscribe
Migration Toolkit Runtimes
Subscribe
Ocp Tools
Subscribe
Openshift Application Runtimes
Subscribe
Quarkus
Subscribe
Red Hat Single Sign On
Subscribe
Rhosemc
Subscribe
Satellite
Subscribe
Satellite Capsule
Subscribe
Satellite Maintenance
Subscribe
Satellite Utils
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3207-1 | jackson-databind security update |
Debian DSA |
DSA-5283-1 | jackson-databind security update |
Github GHSA |
GHSA-jjjh-jjxp-wpff | Uncontrolled Resource Consumption in Jackson-databind |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 10 Apr 2025 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat satellite Maintenance
Redhat satellite Utils |
|
| CPEs | cpe:/a:redhat:satellite_maintenance:6.11::el7 cpe:/a:redhat:satellite_maintenance:6.11::el8 cpe:/a:redhat:satellite_maintenance:6.12::el8 cpe:/a:redhat:satellite_utils:6.11::el7 cpe:/a:redhat:satellite_utils:6.11::el8 cpe:/a:redhat:satellite_utils:6.12::el8 |
|
| Vendors & Products |
Redhat satellite Maintenance
Redhat satellite Utils |
Tue, 25 Feb 2025 02:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat jboss Enterprise Application Platform Eus
|
|
| CPEs | cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7 cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7 |
|
| Vendors & Products |
Redhat jboss Enterprise Application Platform Eus
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-03T12:56:39.107Z
Reserved: 2022-10-02T00:00:00
Link: CVE-2022-42003
No data.
Status : Modified
Published: 2022-10-02T05:15:09.070
Modified: 2024-11-21T07:24:15.093
Link: CVE-2022-42003
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
Github GHSA