CVE-2019-16335

Aliases:GHSA-85cw-hj65-qqv9DEBIAN-CVE-2019-16335CGA-2425-h589-4xvqCGA-4gf2-9c87-pfv4CGA-572h-9qwv-h496CGA-5xh6-fwfq-4xhjCGA-699g-q3j6-v785CGA-6c7g-pvpq-56xpCGA-6ghv-ffmf-vf4wCGA-6hwf-rgrh-36q9CGA-6pcv-2jmc-cf66CGA-72jq-845r-jjx5CGA-745q-xmc8-2h54CGA-79h8-23gf-6g76CGA-7c8v-597x-hj27CGA-8jwx-3g47-738vCGA-97r6-r6x5-m4w3CGA-9933-hghv-xq4qCGA-9gjv-4837-3hvhCGA-9v9j-3546-98r4CGA-cfq3-78hr-w8wgCGA-cv94-fp7w-x624CGA-g4jp-32vw-g52hCGA-h6hh-pw43-w59gCGA-hg2m-3xf5-gx49CGA-hwjg-8885-8mf7CGA-jqmf-v84q-97h2CGA-p6f8-g2cq-2mvvCGA-qg4q-jwvc-j7q5CGA-qq2q-grh8-9mhcCGA-qxw2-8jj5-77jpCGA-v6wc-mqm9-fp6cCGA-vf82-4rq5-5cw7CGA-w323-88xh-w478CGA-w5j3-8pqw-p3wpCGA-w77w-fj4f-wwgwCGA-wm35-7hjv-cpv8CGA-wvfh-prf3-pvxxCGA-x82c-5p2q-97ggCGA-xcrp-3w39-7hm2CGA-xmrp-v36h-c5w9CGA-xv9r-cq2q-68hqCGA-27m5-7qgh-2gqjCGA-47fq-8fv2-w6mhCGA-4grj-9qfm-5vg4CGA-52pw-qc4x-r6c2CGA-638v-v2g9-54mqCGA-687g-jgpm-wcj2CGA-6c5f-f565-wm3jCGA-6w7g-7q4m-g732CGA-74pg-54rg-m4jqCGA-7wpr-wg8m-rrqgCGA-95qh-4w34-9xwwCGA-9m7r-hj64-gh24CGA-9vj8-4w3w-p622CGA-cg9v-rg92-hrqpCGA-g9wq-9mhc-4prrCGA-j7c6-4px3-g9mgCGA-m2g8-cv4v-8x52CGA-mgvw-3968-h54jCGA-p572-3q5m-xc27CGA-p8hj-4rwf-qccrCGA-pffw-cqgh-q54wCGA-pp9r-72gw-vq4pCGA-qj52-3c3j-32xpCGA-vr4g-m3r9-2hx7CGA-wvqg-9f6v-w3mvCGA-24f8-h2p6-w9q7CGA-24w4-487p-3735CGA-28x2-jf84-2vvrCGA-2jm2-53pp-c6cgCGA-34h5-6v77-3gmxCGA-3xw7-gcwq-ccpfCGA-43g5-6f9p-3gcvCGA-4j94-5pp7-4hfcCGA-55c8-wvw6-qjw4CGA-55v6-q9v2-w28hCGA-5ccr-pp7w-25c4CGA-5hw2-pg5w-g5v7CGA-6q6q-69rr-2mvmCGA-72p4-w2hv-8vgwCGA-832h-5cr9-j52vCGA-837m-28hm-63w9CGA-8fjr-vcm9-6xgjCGA-92xc-7m9x-jfmgCGA-9q2w-3mvw-8xmmCGA-c6g9-p4xv-j2xvCGA-cjvm-6cm2-4m7hCGA-cx66-2j84-v8cjCGA-frh6-j7c3-jp3cCGA-fxr4-h883-2934CGA-g7v6-q3hc-2cjcCGA-gx4f-rqfj-4xw4CGA-h39p-hc5h-pr2jCGA-mcjj-xxqj-6ph8CGA-p2c2-xm5h-rv9hCGA-p3c8-xc59-5296CGA-pr92-m43c-34x8CGA-pv3r-x62j-59q2CGA-q82c-qgf6-9m63CGA-r6wq-8v5c-qrjfCGA-vc96-h656-jgj5CGA-vvp3-qj23-jfv9CGA-wq8q-rv9h-qxx6CGA-x46c-rpqp-gw39CGA-27v2-8h55-gp4gCGA-2v7m-p22f-66xcCGA-3w68-mwgx-85jhCGA-4vj5-7xh2-x7rrCGA-5pp7-mgp7-7hm6CGA-6hg2-5934-5g3gCGA-79p3-gg8q-xxhqCGA-7qwq-cjh3-44p4CGA-82mx-6q56-pccjCGA-9f2q-49wc-9m3pCGA-cvmf-r6q3-qpjwCGA-fgwp-9w8j-x7pqCGA-fwc3-r5f2-75xhCGA-gh5j-pr6c-7g4qCGA-hr74-m33v-hrq6CGA-mc6g-vcmw-89ggCGA-mwqq-xfmc-rc2wCGA-p6h2-fwv4-pw2xCGA-pq57-j8wj-gf24CGA-q37v-m9mg-4x8cCGA-qvwf-cqp6-h7j7CGA-qvxj-6x57-gq26CGA-vvrm-gqfh-2xchCGA-wfpq-qh83-cjgfCGA-x875-c7pr-gg6gCGA-xprq-jp2m-6926CGA-xrvc-mppj-9hc2
Advisory lineage Upstream: 0 Downstream: 10
Modified
Published: 15 Sept 2019, 21:45
Last modified:05 Aug 2024, 01:10

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
4.96% LOW
5% probability +4.31%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Sept 2019, 21:45
Published
Vulnerability first disclosed
05 Aug 2024, 01:10
Last Modified
Vulnerability information updated

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 4.96%• Percentile: 92%

Techniques & Countermeasures

  • CWE-502•Deserialization of Untrusted Data

    The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected Systems

  • chainguard•eco-java-gradle-2.10

    all

  • chainguard•eco-java-gradle-2.11

    all

  • chainguard•eco-java-gradle-2.12

    all

  • chainguard•eco-java-gradle-2.13

    all

  • chainguard•eco-java-gradle-2.14

    all

  • chainguard•eco-java-gradle-2.14.1

    all

  • chainguard•eco-java-gradle-2.4

    all

  • chainguard•eco-java-gradle-2.5

    all

  • chainguard•eco-java-gradle-2.6

    all

  • chainguard•eco-java-gradle-2.7

    all

  • chainguard•eco-java-gradle-2.8

    all

  • chainguard•eco-java-gradle-2.9

    all

  • chainguard•eco-java-gradle-3.0

    all

  • chainguard•eco-java-gradle-3.1

    all

  • chainguard•eco-java-gradle-3.2

    all

  • chainguard•eco-java-gradle-3.2.1

    all

  • chainguard•eco-java-gradle-3.3

    all

  • chainguard•eco-java-gradle-3.4

    all

  • chainguard•eco-java-gradle-3.4.1

    all

  • chainguard•eco-java-gradle-3.5

    all

  • chainguard•eco-java-gradle-3.5.1

    all

  • chainguard•eco-java-gradle-4.0

    all

  • chainguard•eco-java-gradle-4.0.1

    all

  • chainguard•eco-java-gradle-4.0.2

    all

  • chainguard•eco-java-gradle-4.1

    all

  • chainguard•eco-java-gradle-4.10

    all

  • chainguard•eco-java-gradle-4.10.1

    all

  • chainguard•eco-java-gradle-4.10.2

    all

  • chainguard•eco-java-gradle-4.10.3

    all

  • chainguard•eco-java-gradle-4.2

    all

  • chainguard•eco-java-gradle-4.2.1

    all

  • chainguard•eco-java-gradle-4.3

    all

  • chainguard•eco-java-gradle-4.3.1

    all

  • chainguard•eco-java-gradle-4.4

    all

  • chainguard•eco-java-gradle-4.4.1

    all

  • chainguard•eco-java-gradle-4.5

    all

  • chainguard•eco-java-gradle-4.5.1

    all

  • chainguard•eco-java-gradle-4.6

    all

  • chainguard•eco-java-gradle-4.7

    all

  • chainguard•eco-java-gradle-4.8

    all

  • chainguard•eco-java-gradle-4.8.1

    all

  • chainguard•eco-java-gradle-4.9

    all

  • chainguard•eco-java-gradle-5.0

    all

  • chainguard•eco-java-gradle-5.1

    all

  • chainguard•eco-java-gradle-5.1.1

    all

  • chainguard•eco-java-gradle-5.2

    all

  • chainguard•eco-java-gradle-5.2.1

    all

  • chainguard•eco-java-gradle-5.3

    all

  • chainguard•eco-java-gradle-5.3.1

    all

  • chainguard•eco-java-gradle-5.4

    all

Showing first 50 affected entries in server-rendered view.

References (52)