CVE-2020-28491
18.02.2021, 16:15
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fasterxml | jackson-dataformats-binary | 𝑥 < 2.11.4 |
| fasterxml | jackson-dataformats-binary | 2.12.0 < 𝑥 < 2.12.1 |
| fasterxml | jackson-dataformats-binary | 2.12.0 |
| fasterxml | jackson-dataformats-binary | 2.12.0:rc1 |
| fasterxml | jackson-dataformats-binary | 2.12.0:rc2 |
| quarkus | quarkus | 𝑥 < 2.0.2 |
| oracle | weblogic_server | 12.2.1.3.0 |
| oracle | weblogic_server | 12.2.1.4.0 |
| oracle | weblogic_server | 14.1.1.0.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References