2019-03-27 12:00:51 +00:00
{
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ID" : "CVE-2019-10172" ,
2019-11-18 17:01:58 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
"STATE" : "PUBLIC"
2019-11-18 12:07:36 -03:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Redhat" ,
"product" : {
"product_data" : [
{
"product_name" : "jackson-mapper-asl" ,
"version" : {
"version_data" : [
{
"version_value" : "1.9.x"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-611"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10172" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10172" ,
"refsource" : "CONFIRM"
2020-02-01 00:01:13 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[debian-lts-announce] 20200131 [SECURITY] [DLA 2091-1] libjackson-json-java security update" ,
"url" : "https://lists.debian.org/debian-lts-announce/2020/01/msg00037.html"
2020-04-07 16:01:44 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200407 [jira] [Created] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/r25e25973e9577c62fd0221b4b52990851adf11cbe33036bd67d4b13d@%3Ccommits.cassandra.apache.org%3E"
2020-04-14 05:01:16 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200413 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/ra37700b842790883b9082e6b281fb7596f571b13078a4856cd38f2c2@%3Ccommits.cassandra.apache.org%3E"
2020-04-20 18:01:26 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200420 [jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/r0066c1e862613de402fee04e81cbe00bcd64b64a2711beb9a13c3b25@%3Ccommits.cassandra.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/r37eb6579fa0bf94a72b6c978e2fee96f68a2b1b3ac1b1ce60aee86cf@%3Ccommits.cassandra.apache.org%3E"
2020-05-20 18:01:16 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200420 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/rb47911c179c9f3e8ea3f134b5645e63cd20c6fc63bd0b43ab5864bd1@%3Ccommits.cassandra.apache.org%3E"
2020-08-18 10:02:24 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200818 [jira] [Updated] (CASSANDRA-16056) Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/re07c51a8026c11e6e5513bfdc66d52d1c1027053e480fb8073356257@%3Ccommits.cassandra.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200818 [jira] [Created] (CASSANDRA-16056) Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/re646dcc2739d92117bf9a76a33c600ed3b65e8b4e9b6f441e366b72b@%3Ccommits.cassandra.apache.org%3E"
2020-08-19 18:01:36 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200819 [jira] [Updated] (CASSANDRA-16056) Remove jackson-mapper-asl-1.9.13 to mitigate CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/r4bbfa1439d7a4e1712e260bfc3d90f7cf997abfd641cccde6432d4ab@%3Ccommits.cassandra.apache.org%3E"
2020-08-24 12:01:23 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[debian-lts-announce] 20200824 [SECURITY] [DLA 2342-1] libjackson-json-java security update" ,
"url" : "https://lists.debian.org/debian-lts-announce/2020/08/msg00039.html"
2020-08-25 05:01:24 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-common-issues] 20200824 [jira] [Created] (HADOOP-17225) Update jackson-mapper-asl-1.9.13 to atlassian version to mitigate: CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/r33d25a342af84102903cd9dec8338a5bcba3ecfce10505bdfe793b92@%3Ccommon-issues.hadoop.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-common-dev] 20200824 [jira] [Created] (HADOOP-17225) Update jackson-mapper-asl-1.9.13 to atlassian version to mitigate: CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/rd3a34d663e2a25b9ab1e8a1a94712cd5f100f098578aec79af48161e@%3Ccommon-dev.hadoop.apache.org%3E"
2020-08-25 19:01:24 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-common-issues] 20200825 [jira] [Updated] (HADOOP-17225) Update jackson-mapper-asl-1.9.13 to atlassian version to mitigate: CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/r48a32f2dd6976d33f7a12b7e09ec7ea1895f8facba82b565587c28ac@%3Ccommon-issues.hadoop.apache.org%3E"
2020-08-26 04:01:27 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-common-issues] 20200825 [jira] [Commented] (HADOOP-17225) Update jackson-mapper-asl-1.9.13 to atlassian version to mitigate: CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/rb8c09b14fd57d855dc21e0a037dc29258c2cbe9c1966bfff453a02e4@%3Ccommon-issues.hadoop.apache.org%3E"
2020-09-01 11:01:25 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/r386966780034aadee69ffd82d44555117c9339545b9ce990fe490a3e@%3Ccommits.cassandra.apache.org%3E"
2020-10-01 11:01:38 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[cassandra-commits] 20200901 [jira] [Commented] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?" ,
"url" : "https://lists.apache.org/thread.html/r80e8882c86c9c17a57396a5ef7c4f08878d629a0291243411be0de3a@%3Ccommits.cassandra.apache.org%3E"
2021-02-23 20:00:39 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[spark-issues] 20210223 [jira] [Created] (SPARK-34511) Current Security vulnerabilities in spark libraries" ,
"url" : "https://lists.apache.org/thread.html/r68acf97f4526ba59a33cc6e592261ea4f85d890f99e79c82d57dd589@%3Cissues.spark.apache.org%3E"
2021-03-18 09:00:43 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-user] 20210317 jackson-mapper-asl vulnerability at Hadoop" ,
"url" : "https://lists.apache.org/thread.html/r43c6f75d203b8afc4fbd6c3200db0384a18a11c59d085b1a9bb0ccfe@%3Cuser.hadoop.apache.org%3E"
2021-03-18 13:00:48 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-issues] 20210318 [jira] [Updated] (HIVE-24904) CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/r1edabcfacdad42d3c830464e9cf07a9a489059a7b7a8642cf055542d@%3Cissues.hive.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-issues] 20210318 [jira] [Assigned] (HIVE-24904) CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/r6dea2a887f5eb1d68f124d64b14cd1a04f682f06de8cd01b7e4214e0@%3Cissues.hive.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-dev] 20210318 [jira] [Created] (HIVE-24904) CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/rce00a1c60f7df4b10e72fa87827c102f55b074bb91993631df2c21f9@%3Cdev.hive.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-issues] 20210318 [jira] [Commented] (HIVE-24904) CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/r500867b74f42230a3d65b8aec31fc93ac390eeae737c91a759ab94cb@%3Cissues.hive.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-dev] 20210318 CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/r5f16a1bd31a7e94ca78eda686179930781aa3a4a990cd55986703581@%3Cdev.hive.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[hive-issues] 20210318 [jira] [Comment Edited] (HIVE-24904) CVE-2019-10172,CVE-2019-10202 vulnerabilities in jackson-mapper-asl-1.9.13.jar" ,
"url" : "https://lists.apache.org/thread.html/r0fbf2c60967bc9f73d7f5a62ad3b955789f9a14b950f42e99fca9b4e@%3Cissues.hive.apache.org%3E"
2021-03-20 10:00:38 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[hadoop-common-issues] 20210320 [jira] [Commented] (HADOOP-17225) Update jackson-mapper-asl-1.9.13 to atlassian version to mitigate: CVE-2019-10172" ,
"url" : "https://lists.apache.org/thread.html/r04ecadefb27cda84b699130b11b96427f1d8a7a4066d8292f7f15ed8@%3Ccommon-issues.hadoop.apache.org%3E"
2019-11-18 12:07:36 -03:00
}
]
2019-03-27 12:00:51 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2019-11-18 12:07:36 -03:00
"value" : "A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes."
2019-03-27 12:00:51 +00:00
}
]
2019-11-18 12:07:36 -03:00
} ,
"impact" : {
"cvss" : [
[
{
"vectorString" : "5.9/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" ,
"version" : "3.0"
}
]
]
2019-03-27 12:00:51 +00:00
}
2019-11-18 17:01:58 +00:00
}