CVE-2019-17267

Aliases:GHSA-f3j5-rmmp-3fc5DEBIAN-CVE-2019-17267CGA-254h-276p-6jq4CGA-3fq7-c7h9-pv79CGA-4458-8cpp-vg27CGA-73j8-64c8-4f6xCGA-7cx3-p4vp-vgwvCGA-7w92-fp7q-677jCGA-7wxq-h87q-v839CGA-8pqx-32px-j32wCGA-8v5c-5p3m-g23hCGA-8vph-jjpw-x79mCGA-9354-q6c2-v3mpCGA-9fhm-222g-38cwCGA-9v3h-5m2w-v95jCGA-c67m-5fx6-hvq3CGA-cfpp-2526-f55qCGA-cwfg-mhj7-85w4CGA-fvc7-73x2-25g6CGA-g2h9-89wg-9h29CGA-g34m-f3p9-gg4mCGA-gc4h-rgfw-2f36CGA-gpvg-vxcv-6h7qCGA-h6jc-5mpv-hqjqCGA-hcx8-vp5r-29pwCGA-hx9q-pg5w-55rpCGA-j59h-g827-fgm7CGA-j67w-g8q7-3xr8CGA-j85f-j45f-q4f5CGA-jjwp-74fc-74p6CGA-m5f6-j7x4-qhm3CGA-p25r-r555-4366CGA-p53q-h2h8-7p5fCGA-pfx6-fp6f-cwq5CGA-q32c-7q4p-86ccCGA-r833-9vxf-5xm7CGA-rv7h-c7qf-rhx2CGA-v98r-qfwc-h4r3CGA-vwhj-9253-m884CGA-wpx6-j8pm-5557CGA-xpv2-j25g-r562CGA-xvqg-9fg4-78m9CGA-2p9f-79vc-w62wCGA-34wg-hj2q-4wvmCGA-3c89-4x84-r9ffCGA-3v34-46fm-ch7gCGA-4g84-j2jq-fjcjCGA-6rv5-vf2p-474hCGA-79jp-v8h7-2w2gCGA-7rvw-5h4m-xp64CGA-85hj-7xmp-vhhhCGA-93w2-j8fp-qw95CGA-9439-j74c-pcfhCGA-9rxj-f62w-cqwhCGA-fmr8-828h-34rpCGA-fqf6-j4vj-vq7gCGA-gm2f-gp3w-hwwgCGA-h8pf-74hp-hpjxCGA-hr6m-2m8v-7p5gCGA-j3f2-p9p6-qjp5CGA-jrjf-4wm6-hf84CGA-jw55-hqp7-5249CGA-jwjr-5f5h-6945CGA-mqcg-xw8g-9qj2CGA-qh4f-rc7g-fm85CGA-rqh2-4rqx-pm2mCGA-vjcw-cmqr-v6mvCGA-vqv3-r475-xq73CGA-wwp8-6q24-hhfvCGA-xvp2-9jh3-pjrvCGA-2fj9-3w9r-pgmxCGA-37v4-5v9h-5fp3CGA-3gh4-5m7g-5r8rCGA-3qfm-fpqj-mfg2CGA-52jc-2wp3-r897CGA-654q-ggx9-c53qCGA-737f-3pwc-5hqgCGA-8c67-c638-g65xCGA-8pvp-6rv5-352rCGA-8xhh-8rcj-xgq9CGA-934x-286r-q83rCGA-9wv2-w3jp-wj5fCGA-cpjw-gpp3-52ffCGA-f8rp-vqpx-w8j9CGA-fg32-c8rh-248gCGA-fm8q-xhf3-qcmwCGA-g5g3-55pq-2f7gCGA-ghh7-j9x6-p6c5CGA-h2jr-27q2-cj7hCGA-h7h3-cv28-vcjjCGA-j6f7-hf26-f5jqCGA-j7qx-6p25-h364CGA-mpg7-48qg-mjwxCGA-mrjx-5jv8-62wqCGA-p5ww-4p9q-c9vfCGA-pvrr-pr5h-2jgjCGA-pxj3-7v5w-8xfrCGA-q5jj-8ppx-mxjvCGA-q6g4-7456-55cmCGA-qfch-xxmp-mgx7CGA-rc3m-7q8j-w8f6CGA-rp35-8jf9-7mrrCGA-rqp6-5gv8-65fqCGA-rwwh-35q4-gmrhCGA-rxjp-h7j2-j44vCGA-v298-php5-vq6wCGA-wp3w-qhhj-rmj3CGA-ww5j-98qq-g39pCGA-32rr-vqqq-85qgCGA-36g3-9qxc-7mv2CGA-3qqr-67mh-8475CGA-59m3-5cf3-m8v6CGA-6478-3mwx-p646CGA-69gc-9r3r-5wwqCGA-745m-39f6-9f8qCGA-79pc-ccfr-268cCGA-7w2h-pf72-gvwjCGA-8f3h-vp34-p742CGA-c3h2-cvx9-86v7CGA-c3hp-4c7c-4p72CGA-fwjh-ff2p-2r47CGA-h3g6-q7j9-x756CGA-h5pg-7842-q2ppCGA-hcp7-gch5-5hhjCGA-hggj-mq7g-mq3vCGA-hjv3-hfmw-fpxvCGA-j73p-wm8x-6gwhCGA-pv72-h763-p3qfCGA-q3rj-g8gw-6ggrCGA-q787-36m6-c6pjCGA-v5f5-x29f-3h54CGA-xq48-46qm-484q
Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 06 Oct 2019, 23:08
Last modified:05 Aug 2024, 01:33

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.8 CRITICAL
v3.1 (nvd)
EPSS Score
4.63% LOW
5% probability +3.43%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Oct 2019, 23:08
Published
Vulnerability first disclosed
05 Aug 2024, 01:33
Last Modified
Vulnerability information updated

Description

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 4.63%• Percentile: 91%

Techniques & Countermeasures

  • CWE-502•Deserialization of Untrusted Data

    The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Affected Systems

  • chainguard•eco-java-gradle-2.10

    all

  • chainguard•eco-java-gradle-2.11

    all

  • chainguard•eco-java-gradle-2.12

    all

  • chainguard•eco-java-gradle-2.13

    all

  • chainguard•eco-java-gradle-2.14

    all

  • chainguard•eco-java-gradle-2.14.1

    all

  • chainguard•eco-java-gradle-2.4

    all

  • chainguard•eco-java-gradle-2.5

    all

  • chainguard•eco-java-gradle-2.6

    all

  • chainguard•eco-java-gradle-2.7

    all

  • chainguard•eco-java-gradle-2.8

    all

  • chainguard•eco-java-gradle-2.9

    all

  • chainguard•eco-java-gradle-3.0

    all

  • chainguard•eco-java-gradle-3.1

    all

  • chainguard•eco-java-gradle-3.2

    all

  • chainguard•eco-java-gradle-3.2.1

    all

  • chainguard•eco-java-gradle-3.3

    all

  • chainguard•eco-java-gradle-3.4

    all

  • chainguard•eco-java-gradle-3.4.1

    all

  • chainguard•eco-java-gradle-3.5

    all

  • chainguard•eco-java-gradle-3.5.1

    all

  • chainguard•eco-java-gradle-4.0

    all

  • chainguard•eco-java-gradle-4.0.1

    all

  • chainguard•eco-java-gradle-4.0.2

    all

  • chainguard•eco-java-gradle-4.1

    all

  • chainguard•eco-java-gradle-4.10

    all

  • chainguard•eco-java-gradle-4.10.1

    all

  • chainguard•eco-java-gradle-4.10.2

    all

  • chainguard•eco-java-gradle-4.10.3

    all

  • chainguard•eco-java-gradle-4.2

    all

  • chainguard•eco-java-gradle-4.2.1

    all

  • chainguard•eco-java-gradle-4.3

    all

  • chainguard•eco-java-gradle-4.3.1

    all

  • chainguard•eco-java-gradle-4.4

    all

  • chainguard•eco-java-gradle-4.4.1

    all

  • chainguard•eco-java-gradle-4.5

    all

  • chainguard•eco-java-gradle-4.5.1

    all

  • chainguard•eco-java-gradle-4.6

    all

  • chainguard•eco-java-gradle-4.7

    all

  • chainguard•eco-java-gradle-4.8

    all

  • chainguard•eco-java-gradle-4.8.1

    all

  • chainguard•eco-java-gradle-4.9

    all

  • chainguard•eco-java-gradle-5.0

    all

  • chainguard•eco-java-gradle-5.1

    all

  • chainguard•eco-java-gradle-5.1.1

    all

  • chainguard•eco-java-gradle-5.2

    all

  • chainguard•eco-java-gradle-5.2.1

    all

  • chainguard•eco-java-gradle-5.3

    all

  • chainguard•eco-java-gradle-5.3.1

    all

  • chainguard•eco-java-gradle-5.4

    all

Showing first 50 affected entries in server-rendered view.

References (32)