In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

Project Subscriptions

Vendors Products
Debian Linux Subscribe
Fasterxml Subscribe
Jackson-databind Subscribe
Oncommand Workflow Automation Subscribe
Quarkus Subscribe
Quarkus Subscribe
Amq Broker Subscribe
Amq Streams Subscribe
Camel Quarkus Subscribe
Camel Spring Boot Subscribe
Jboss Data Grid Subscribe
Jboss Enterprise Application Platform Subscribe
Jboss Enterprise Application Platform Eus Subscribe
Jboss Enterprise Bpms Platform Subscribe
Logging Subscribe
Migration Toolkit Runtimes Subscribe
Ocp Tools Subscribe
Openshift Application Runtimes Subscribe
Quarkus Subscribe
Red Hat Single Sign On Subscribe
Rhosemc Subscribe
Satellite Subscribe
Satellite Capsule Subscribe
Satellite Maintenance Subscribe
Satellite Utils Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3207-1 jackson-databind security update
Debian DSA Debian DSA DSA-5283-1 jackson-databind security update
Github GHSA Github GHSA GHSA-jjjh-jjxp-wpff Uncontrolled Resource Consumption in Jackson-databind
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 10 Apr 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat satellite Maintenance
Redhat satellite Utils
CPEs cpe:/a:redhat:satellite_maintenance:6.11::el7
cpe:/a:redhat:satellite_maintenance:6.11::el8
cpe:/a:redhat:satellite_maintenance:6.12::el8
cpe:/a:redhat:satellite_utils:6.11::el7
cpe:/a:redhat:satellite_utils:6.11::el8
cpe:/a:redhat:satellite_utils:6.12::el8
Vendors & Products Redhat satellite Maintenance
Redhat satellite Utils

Tue, 25 Feb 2025 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jboss Enterprise Application Platform Eus
CPEs cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7
cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7
Vendors & Products Redhat jboss Enterprise Application Platform Eus

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T12:56:39.107Z

Reserved: 2022-10-02T00:00:00

Link: CVE-2022-42003

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-02T05:15:09.070

Modified: 2024-11-21T07:24:15.093

Link: CVE-2022-42003

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-10-02T00:00:00Z

Links: CVE-2022-42003 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses