Back to search
CVE-2017-7525
Published: Feb 6, 2018
Modified: Sep 17, 2024
PUBLISHED
Description
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
| Vendor | Product | Versions |
|---|---|---|
FasterXML | jackson-databind | affected before 2.6.7.1affected before 2.7.9.1affected before 2.8.9 |
Weaknesses (CWE)
References
1040360
vdb-entry
x_refsource_SECTRACK
RHSA-2017:1840
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2547
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1836
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1835
vendor-advisory
x_refsource_REDHAT
RHSA-2018:1449
vendor-advisory
x_refsource_REDHAT
1039744
vdb-entry
x_refsource_SECTRACK
1039947
vdb-entry
x_refsource_SECTRACK
RHSA-2017:2635
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2638
vendor-advisory
x_refsource_REDHAT
RHSA-2018:1450
vendor-advisory
x_refsource_REDHAT
RHSA-2017:3458
vendor-advisory
x_refsource_REDHAT
RHSA-2018:0294
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1837
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1834
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2546
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2636
vendor-advisory
x_refsource_REDHAT
RHSA-2017:3455
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2477
vendor-advisory
x_refsource_REDHAT
RHSA-2017:3456
vendor-advisory
x_refsource_REDHAT
RHSA-2018:0342
vendor-advisory
x_refsource_REDHAT
RHSA-2017:1839
vendor-advisory
x_refsource_REDHAT
99623
vdb-entry
x_refsource_BID
RHSA-2017:2637
vendor-advisory
x_refsource_REDHAT
RHSA-2017:3454
vendor-advisory
x_refsource_REDHAT
DSA-4004
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:3141
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2633
vendor-advisory
x_refsource_REDHAT
RHSA-2019:0910
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2858
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3149
vendor-advisory
x_refsource_REDHAT
[lucene-solr-user] 20191218 CVE-2017-7525 fix for Solr 7.7.x
mailing-list
x_refsource_MLIST
[lucene-solr-user] 20191218 Re: CVE-2017-7525 fix for Solr 7.7.x
mailing-list
x_refsource_MLIST
[lucene-solr-user] 20191219 Re: CVE-2017-7525 fix for Solr 7.7.x
mailing-list
x_refsource_MLIST
[debian-lts-announce] 20200131 [SECURITY] [DLA 2091-1] libjackson-json-java security update
mailing-list
x_refsource_MLIST
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
x_refsource_CONFIRM
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
x_refsource_CONFIRM
[debian-lts-announce] 20200824 [SECURITY] [DLA 2342-1] libjackson-json-java security update
mailing-list
x_refsource_MLIST
https://www.oracle.com/security-alerts/cpuoct2020.html
x_refsource_MISC
https://github.com/FasterXML/jackson-databind/issues/1723
x_refsource_CONFIRM
https://github.com/FasterXML/jackson-databind/issues/1599
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1462702
x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20171214-0002/
x_refsource_CONFIRM
https://cwiki.apache.org/confluence/display/WW/S2-055
x_refsource_CONFIRM
[spark-issues] 20210223 [jira] [Created] (SPARK-34511) Current Security vulnerabilities in spark libraries
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now