CVE-2021-46877

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2021-46877

Severity

Unknown

Description

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.

References

https://images.chainguard.dev/security/CGA-fgh7-phh7-cj6x
https://github.com/advisories/GHSA-3x8x-79m2-3w2w
https://images.chainguard.dev/security/CGA-wx62-j2gw-cp39
https://images.chainguard.dev/security/CGA-mh9h-j5q6-fjr7
https://images.chainguard.dev/security/CGA-qxm8-7x98-7m5g
https://images.chainguard.dev/security/CGA-fmmr-8r7x-f2p7
https://images.chainguard.dev/security/CGA-rxrj-cf2v-c7cp
https://images.chainguard.dev/security/CGA-pjf5-w97v-xqmx
https://images.chainguard.dev/security/CGA-v95v-8w2m-8jvx
https://images.chainguard.dev/security/CGA-xhwm-c67m-hhvv
https://github.com/FasterXML/jackson-databind/issues/3328
https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw
https://security-tracker.debian.org/tracker/CVE-2021-46877

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2021-46877

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources