QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-14719

Back to search

CVE-2018-14719

Published: Jan 2, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2019:0782
vendor-advisory
x_refsource_REDHAT
RHSA-2019:0877
vendor-advisory
x_refsource_REDHAT
RHBA-2019:0959
vendor-advisory
x_refsource_REDHAT
DSA-4452
vendor-advisory
x_refsource_DEBIAN
RHSA-2019:1782
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1797
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1822
vendor-advisory
x_refsource_REDHAT
RHSA-2019:1823
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2804
vendor-advisory
x_refsource_REDHAT
RHSA-2019:2858
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3002
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3140
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3149
vendor-advisory
x_refsource_REDHAT
RHSA-2019:3892
vendor-advisory
x_refsource_REDHAT
RHSA-2019:4037
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now