CVE-2018-19361
- State
- Published
- Severity
- Not scored
- Published
- Jan 2, 2019
- Updated
- Oct 15, 2026
- Reserved
- Nov 19, 2018
Description
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/FasterXML/jackson-databind/issues/2186
- [debian-lts-announce] 20190304 [SECURITY] [DLA 1703-1] jackson-databind security updatemailing-list
- https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.9.8
- https://issues.apache.org/jira/browse/TINKERPOP-2121
- https://github.com/FasterXML/jackson-databind/commit/42912cac4753f3f718ece875e4d486f8264c2f2b
- [infra-devnull] 20190329 [GitHub] [pulsar] massakam opened pull request #3938: Upgrade third party libraries with security vulnerabilitiesmailing-list
- [pulsar-commits] 20190329 [GitHub] [pulsar] massakam opened a new pull request #3938: Upgrade third party libraries with security vulnerabilitiesmailing-list
- [pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1mailing-list
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- RHSA-2019:0782vendor-advisory
- RHSA-2019:0877vendor-advisory
- RHBA-2019:0959vendor-advisory
- DSA-4452vendor-advisory
- 20190527 [SECURITY] [DSA 4452-1] jackson-databind security updatemailing-list
- https://security.netapp.com/advisory/ntap-20190530-0003/
- RHSA-2019:1782vendor-advisory
- RHSA-2019:1797vendor-advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- 107985vdb-entry
- RHSA-2019:1822vendor-advisory
- RHSA-2019:1823vendor-advisory
- RHSA-2019:2804vendor-advisory
- RHSA-2019:2858vendor-advisory
- RHSA-2019:3002vendor-advisory
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- RHSA-2019:3140vendor-advisory
- [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilitiesmailing-list
- RHSA-2019:3149vendor-advisory
- [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitiesmailing-list
- [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitiesmailing-list
- [nifi-commits] 20191113 svn commit: r1869773 - /nifi/site/trunk/security.htmlmailing-list
- RHSA-2019:3892vendor-advisory
- RHSA-2019:4037vendor-advisory
- [nifi-commits] 20200123 svn commit: r1873083 - /nifi/site/trunk/security.htmlmailing-list
- https://www.oracle.com/security-alerts/cpuapr2020.html
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 imagemailing-list
- [geode-issues] 20200831 [jira] [Created] (GEODE-8471) Dependency security issues in geode-core-1.12mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.