FasterXML jackson-databind 代码问题漏洞

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/FasterXML/jackson-databind/commit/998efd708284778f29d83d7962a9bd935c228317

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2020:0729

来源:MISC

链接:https://github.com/FasterXML/jackson-databind/issues/2469

来源:MLIST

链接:https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20200327-0006/

来源:CONFIRM

链接:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893

来源:MISC

链接:https://www.oracle.com/security-alerts/cpujul2020.html

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuoct2020.html

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0445

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0164

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0161

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0160

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0159

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158636/Red-Hat-Security-Advisory-2020-3192-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-series-of-vulnerabilities-in-fasterxml-jackson-databind-affect-apache-solr-shipped-with-ibm-operations-analytics-log-analysis/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-in-jackson-databind-affect-b2b-api-of-ibm-sterling-b2b-integrator-2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0986/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-faster-xml-jackson-databind-affects-ibm-operations-analytics-predictive-insights-cve-2019-144892-cve-2019-144893/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cognos-business-intelligence-has-addressed-multiple-vulnerabilities-q12021/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157859/Red-Hat-Security-Advisory-2020-2333-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2588/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cognos-analytics-has-addressed-multiple-vulnerabilities-3/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156630/Red-Hat-Security-Advisory-2020-0729-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-jackson-databind-publicly-disclosed-vulnerability-found-in-network-performance-insight-cve-2019-14892-cve-2019-14893/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1766/

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/FasterXML-jackson-databind-code-execution-via-Xalan-Serialization-Gadgets-31385

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1882/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157741/Red-Hat-Security-Advisory-2020-2067-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156815/Red-Hat-Security-Advisory-2020-0899-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-in-jackson-databind-affect-b2b-api-of-ibm-sterling-b2b-integrator-3/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0832/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156241/Red-Hat-Security-Advisory-2020-0445-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0216/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-jackson-databind-library-shipped-with-ibm-global-mailbox-cve-2019-14892-cve-2019-14893/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0450/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156011/Red-Hat-Security-Advisory-2020-0159-01.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affects-ibm-jazz-foundation-and-ibm-engineering-products/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-14893

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1440/

来源:www.nsfocus.net

链接:http://www.nsfocus.net/vulndb/48653