CVE-2022-42003
EUVD-2022-711702.10.2022, 05:15
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fasterxml | jackson-databind | 𝑥 < 2.12.7.1 |
| fasterxml | jackson-databind | 2.13.0 ≤ 𝑥 < 2.13.4.1 |
| quarkus | quarkus | 𝑥 < 2.13.3 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
| netapp | oncommand_workflow_automation | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References