p PatchFirst

CVE-2019-10172

CVE-2019-10172

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

CVSS 5.9 · Medium · EPSS 17.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • jackson-mapper-asl

    Versions
    • 1.9.x: Affected

    No fix published

  • libjackson-json-java Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.9.13-2

    Update to 1.9.13-2

  • libjackson-json-java Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.9.13-2

    Update to 1.9.13-2

  • libjackson-json-java Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.9.13-2

    Update to 1.9.13-2

  • libjackson-json-java Ubuntu:Pro:14.04:LTS

    Versions
    • 1.9.2-1
    • 1.9.2-2
    • 1.9.2-3
    Affected ranges
    • ECOSYSTEM: < 1.9.2-3+deb8u1build0.14.04.1~esm1

    Update to 1.9.2-3+deb8u1build0.14.04.1~esm1

  • libjackson-json-java Ubuntu:16.04:LTS

    Versions
    • 1.9.2-3
    • 1.9.2-4
    • 1.9.2-5
    • 1.9.2-6
    • 1.9.2-7
    Affected ranges
    • ECOSYSTEM: < 1.9.2-7ubuntu0.2

    Update to 1.9.2-7ubuntu0.2

  • libjackson-json-java Ubuntu:18.04:LTS

    Versions
    • 1.9.2-8
    • 1.9.2-9
    • 1.9.13-1~18.04
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libjackson-json-java Ubuntu:20.04:LTS

    Versions
    • 1.9.13-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →