Download
| Alert*
|
oval:org.secpod.oval:def:78223
The host is installed with Xcode before 13.3 on Apple Mac OS 12 or later and is prone to a remote code execution vulnerability. A flaw is present in the application, which fails to properly handle the issues in FasterXML jackson-databind and Apache Log4j2. Successful exploitation allows remote attac ... oval:org.secpod.oval:def:504914 The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Security Fix: * jackson-databind: default typing mishandling leading to remote code execution For more details about the security issue, including the impact, a CV ... oval:org.secpod.oval:def:78233 The host is missing a security update according to the Apple advisory and is prone to multiple vulnerabilities. The flaws are present in the application, which fails to properly handle multiple issues. Successful exploitation allows attackers to cause an unexpected application termination or arbitra ... oval:org.secpod.oval:def:117118 Core part of Jackson that defines Streaming API as well as basic shared abstractions. oval:org.secpod.oval:def:117119 Core annotations used for value types, used by Jackson data-binding package. oval:org.secpod.oval:def:117125 A "bill of materials" POM for Jackson dependencies. oval:org.secpod.oval:def:117126 The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. oval:org.secpod.oval:def:117124 Core annotations used for value types, used by Jackson data-binding package. oval:org.secpod.oval:def:117121 The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration. oval:org.secpod.oval:def:117122 A "bill of materials" POM for Jackson dependencies. oval:org.secpod.oval:def:117120 Core part of Jackson that defines Streaming API as well as basic shared abstractions. oval:org.secpod.oval:def:604554 It was discovered that libjackson2-databind-java, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker providing maliciously crafted input to perform code execution, or read arbitrary files on the s ... oval:org.secpod.oval:def:69914 It was discovered that libjackson2-databind-java, a Java library used to parse JSON and other data formats, did not properly validate user input before attempting deserialization. This allowed an attacker providing maliciously crafted input to perform code execution, or read arbitrary files on the s ... |
