Lucene search
RedHatRHSA-2020:4173HistoryOct 05, 2020 - 2:48 p.m.
(RHSA-2020:4173) Important: rh-maven35-jackson-databind security update
2020-10-0514:48:05
access.redhat.com
36
0.005 Low
EPSS
Percentile
77.3%
The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API.
Security Fix(es):
- jackson-databind: Serialization gadgets in com.pastdev.httpcomponents.configuration.JndiConfiguration (CVE-2020-24750)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | noarch | rh-maven35-jackson-databind-javadoc | < 2.7.6-2.11.el7 | rh-maven35-jackson-databind-javadoc-2.7.6-2.11.el7.noarch.rpm |
| RedHat | 7 | noarch | rh-maven35-jackson-databind | < 2.7.6-2.11.el7 | rh-maven35-jackson-databind-2.7.6-2.11.el7.noarch.rpm |
Related
github
github
Unsafe Deserialization in jackson-databind
2021-12-09 19:15:36
redhatcve
redhatcve
CVE-2020-24750
2020-09-24 10:17:30
debiancve
debiancve
CVE-2020-24750
2020-09-17 19:15:13
osv
osv
CVE-2020-24750
2020-09-17 19:15:13
Unsafe Deserialization in jackson-databind
2021-12-09 19:15:36
jackson-databind - security update
2021-04-25 00:00:00
nessus
nessus
RHEL 7 : rh-maven35-jackson-databind (RHSA-2020:4173)
2023-01-23 00:00:00
Debian DLA-2638-1 : jackson-databind security update
2021-04-27 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind
2020-05-27 13:42:11
ibm
ibm
nvd
nvd
CVE-2020-24750
2020-09-17 19:15:13
cve
cve
CVE-2020-24750
2020-09-17 19:15:13
ubuntucve
ubuntucve
CVE-2020-24750
2020-09-17 00:00:00
cvelist
cvelist
CVE-2020-24750
2020-09-17 18:39:40
prion
prion
Design/Logic Flaw
2020-09-17 19:15:00
veracode
veracode
Arbitrary Code Execution
2020-09-18 06:07:30
debian
debian
[SECURITY] [DLA 2638-1] jackson-databind security update
2021-04-24 20:50:12
openvas
openvas
Debian: Security Advisory (DLA-2638-1)
2021-04-25 00:00:00
redhat
redhat
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00