Lucene search
Ubuntu.comUB:CVE-2020-9546HistoryMar 02, 2020 - 12:00 a.m.
CVE-2020-9546
2020-03-0200:00:00
ubuntu.com
ubuntu.com
19
0.007 Low
EPSS
Percentile
79.6%
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction
between serialization gadgets and typing, related to
org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded
hikari-config).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | jackson-databind | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | jackson-databind | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | jackson-databind | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | jackson-databind | < 2.4.2-3ubuntu0.1~esm2 | UNKNOWN |
References
github.com/FasterXML/jackson-databind/issues/2631
launchpad.net/bugs/cve/CVE-2020-9546
medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
nvd.nist.gov/vuln/detail/CVE-2020-9546
security-tracker.debian.org/tracker/CVE-2020-9546
ubuntu.com/security/notices/USN-4813-1
www.cve.org/CVERecord?id=CVE-2020-9546
Related
cvelist
cvelist
CVE-2020-9546
2020-03-02 03:59:18
osv
osv
CVE-2020-9546
2020-03-02 04:15:10
prion
prion
Design/Logic Flaw
2020-03-02 04:15:00
cve
cve
CVE-2020-9546
2020-03-02 04:15:00
github
github
veracode
veracode
Deserialization Of Untrusted Object
2020-03-03 03:42:59
debiancve
debiancve
CVE-2020-9546
2020-03-02 04:15:00
redhatcve
redhatcve
CVE-2020-9546
2020-03-23 20:01:24
ibm
ibm
nessus
nessus
Debian DLA-2135-1 : jackson-databind security update
2020-03-06 00:00:00
Oracle Enterprise Manager Cloud Control (Jul 2020 CPU)
2020-07-16 00:00:00
CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2020:1644)
2021-02-01 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2135-1)
2020-03-06 00:00:00
Mageia: Security Advisory (MGASA-2021-0153)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4813-1)
2023-01-27 00:00:00
rocky
rocky
pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update
2020-04-28 09:00:20
redhat
redhat
mageia
mageia
Updated jackson-databind packages fix security vulnerabilities
2021-03-27 17:27:02
ubuntu
ubuntu
Jackson Databind vulnerabilities
2021-03-15 00:00:00
hp
hp
HP Device Manager Security Updates
2023-10-20 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00