RHSA-2018:2743: codehaus-jackson Red Hat

CVSS: 7.5v3.0HighPublished

Published 29-09-2024Last modified 05-08-2026

Open JSON

Vulnerability summary

RHSA-2018:2743 is a high (CVSS 7.5) vulnerability in codehaus-jackson Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.0 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0

CVE-2017-2582 CVE-2017-7536 CVE-2018-10237 CVE-2018-1336

Timeline

29-09-2024
PublishedVulnerability first disclosed.
05-08-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.21 security update

CVSS metrics

1 score · 1 source · 1 version

v3.07.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat89 products

codehaus-jackson< 0:1.9.9-14.redhat_7.1.ep6.el6
codehaus-jackson-core-asl< 0:1.9.9-14.redhat_7.1.ep6.el6
codehaus-jackson-jaxrs< 0:1.9.9-14.redhat_7.1.ep6.el6
codehaus-jackson-mapper-asl< 0:1.9.9-14.redhat_7.1.ep6.el6
codehaus-jackson-xc< 0:1.9.9-14.redhat_7.1.ep6.el6

guava-libraries< 0:13.0.1-5.redhat_3.1.ep6.el6
hibernate4-validator< 0:4.3.4-1.Final_redhat_1.1.ep6.el6
hornetq< 0:2.3.25-27.SP28_redhat_1.1.ep6.el6
ironjacamar-common-api-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-common-impl-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-common-spi-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-core-api-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-core-impl-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-deployers-common-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-jdbc-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-spec-api-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
ironjacamar-validator-eap6< 0:1.0.42-2.Final_redhat_2.1.ep6.el6
jboss-as-appclient< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-cli< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-client-all< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-clustering< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-cmp< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-configadmin< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-connector< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-controller< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-controller-client< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-core-security< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-deployment-repository< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-deployment-scanner< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-domain-http< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-domain-management< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-ee< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-ee-deployment< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-ejb3< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-embedded< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-host-controller< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jacorb< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jaxr< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jaxrs< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jdr< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jmx< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jpa< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jsf< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-jsr77< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-logging< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-mail< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-management-client-content< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-messaging< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-modcluster< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-naming< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-network< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-osgi< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-osgi-configadmin< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-osgi-service< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-picketlink< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-platform-mbean< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-pojo< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-process-controller< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-protocol< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-remoting< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-sar< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-security< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-server< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-system-jmx< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-threads< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-transactions< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-version< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-web< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-webservices< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-weld< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-as-xts< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jboss-ejb-client< 0:1.0.41-1.Final_redhat_1.1.ep6.el6
jboss-modules< 0:1.3.11-1.Final_redhat_1.1.ep6.el6
jboss-vfs2< 0:3.2.13-1.Final_redhat_1.1.ep6.el6
jboss-xnio-base< 0:3.0.17-1.GA_redhat_1.1.ep6.el6
jbossas-appclient< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-bundles< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-core< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-domain< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-javadocs< 0:7.5.21-2.Final_redhat_1.2.ep6.el6
jbossas-modules-eap< 0:7.5.21-1.Final_redhat_1.1.ep6.el6
jbossas-product-eap< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-standalone< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossas-welcome-content-eap< 0:7.5.21-2.Final_redhat_1.1.ep6.el6
jbossweb< 0:7.5.29-1.Final_redhat_1.1.ep6.el6
picketlink-bindings< 0:2.5.4-23.SP18_redhat_2.1.ep6.el6
picketlink-federation< 0:2.5.4-21.SP18_redhat_2.1.ep6.el6
xerces-j2-eap6< 0:2.9.1-19.redhat_8.1.ep6.el6

Show all 89

1 vendor · 89 products

References

35 links

Show all 35 references

bugzilla.redhat.com/show_bug.cgi?id=1594389REPORT
bugzilla.redhat.com/show_bug.cgi?id=1602226REPORT
bugzilla.redhat.com/show_bug.cgi?id=1606334REPORT
bugzilla.redhat.com/show_bug.cgi?id=1607591REPORT
bugzilla.redhat.com/show_bug.cgi?id=1610355REPORT
bugzilla.redhat.com/show_bug.cgi?id=1610742REPORT
bugzilla.redhat.com/show_bug.cgi?id=1611770REPORT
bugzilla.redhat.com/show_bug.cgi?id=1614448REPORT
bugzilla.redhat.com/show_bug.cgi?id=1615347REPORT
bugzilla.redhat.com/show_bug.cgi?id=1615380REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2743.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-2582REPORT
www.cve.org/CVERecord?id=CVE-2017-2582Advisory
nvd.nist.gov/vuln/detail/CVE-2017-2582Advisory
access.redhat.com/security/cve/CVE-2017-7536REPORT
www.cve.org/CVERecord?id=CVE-2017-7536Advisory
nvd.nist.gov/vuln/detail/CVE-2017-7536Advisory
access.redhat.com/security/cve/CVE-2018-1336REPORT
www.cve.org/CVERecord?id=CVE-2018-1336Advisory
nvd.nist.gov/vuln/detail/CVE-2018-1336Advisory
access.redhat.com/security/cve/CVE-2018-10237REPORT
www.cve.org/CVERecord?id=CVE-2018-10237Advisory
nvd.nist.gov/vuln/detail/CVE-2018-10237Advisory
github.com/google/guava/wiki/CVE-2018-10237ARTICLE
groups.google.com/forum/ARTICLE