Description
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
Published: 2022-10-02
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-3207-1 jackson-databind security update
Debian DSA Debian DSA DSA-5283-1 jackson-databind security update
Github GHSA Github GHSA GHSA-jjjh-jjxp-wpff Uncontrolled Resource Consumption in Jackson-databind
History

Thu, 10 Apr 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat satellite Maintenance
Redhat satellite Utils
CPEs cpe:/a:redhat:satellite_maintenance:6.11::el7
cpe:/a:redhat:satellite_maintenance:6.11::el8
cpe:/a:redhat:satellite_maintenance:6.12::el8
cpe:/a:redhat:satellite_utils:6.11::el7
cpe:/a:redhat:satellite_utils:6.11::el8
cpe:/a:redhat:satellite_utils:6.12::el8
Vendors & Products Redhat satellite Maintenance
Redhat satellite Utils

Tue, 25 Feb 2025 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat jboss Enterprise Application Platform Eus
CPEs cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7
cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7
Vendors & Products Redhat jboss Enterprise Application Platform Eus

Subscriptions

Debian Debian Linux
Fasterxml Jackson-databind
Netapp Oncommand Workflow Automation
Quarkus Quarkus
Redhat Amq Broker Amq Streams Camel Quarkus Camel Spring Boot Jboss Data Grid Jboss Enterprise Application Platform Jboss Enterprise Application Platform Eus Jboss Enterprise Bpms Platform Logging Migration Toolkit Runtimes Ocp Tools Openshift Application Runtimes Quarkus Red Hat Single Sign On Rhosemc Satellite Satellite Capsule Satellite Maintenance Satellite Utils
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T12:56:39.107Z

Reserved: 2022-10-02T00:00:00.000Z

Link: CVE-2022-42003

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-02T05:15:09.070

Modified: 2024-11-21T07:24:15.093

Link: CVE-2022-42003

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-10-02T00:00:00Z

Links: CVE-2022-42003 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses