Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-28491

Fixed in a distro release EPSS 3%CVSS 7.5

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.

Published 2021-02-18 · CVE record · OSV

Products: fasterxml jackson-dataformats-binary, quarkus, oracle weblogic_server

Fixed upstream

EcosystemPackageFixed in
Mavencom.fasterxml.jackson.dataformat:jackson-dataformat-cbor2.11.4
Mavencom.fasterxml.jackson.dataformat:jackson-dataformat-cbor2.12.1

Distro releases

ReleasePackageFixed in
Debian 12jackson-dataformat-cborno fix
Debian 13jackson-dataformat-cbor2.7.8-5.1
Debian 14jackson-dataformat-cbor2.7.8-5.1
Red Hat red hat single sign on 7rh-sso7-keycloak0:9.0.15-1.redhat_00002.1.el6sso
Red Hat red hat single sign on 7rh-sso7-keycloak0:9.0.15-1.redhat_00002.1.el7sso
Red Hat red hat single sign on 7rh-sso7-keycloak0:9.0.15-1.redhat_00002.1.el8sso
Red Hat red hat single sign on 7rh-sso7-keycloak-server0:9.0.15-1.redhat_00002.1.el7sso
Red Hat red hat single sign on 7rh-sso7-keycloak-server0:9.0.15-1.redhat_00002.1.el6sso
Red Hat red hat single sign on 7rh-sso7-keycloak-server0:9.0.15-1.redhat_00002.1.el8sso
SUSE Enterprise Storage 7jackson-annotations2.13.0-150200.3.6.1
SUSE Enterprise Storage 7jackson-core2.13.0-150200.3.6.1
SUSE Enterprise Storage 7jackson-databind2.13.0-150200.3.9.1
SUSE Enterprise Storage 7jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSjackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSjackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSjackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSjackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSjackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSjackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSjackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSjackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Module for Basesystem 15 SP3jackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP3jackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP3jackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4jackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP4jackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP4jackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Module for Development Tools 15 SP3jackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP3jackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP3jackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Module for Development Tools 15 SP3jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Module for Development Tools 15 SP4jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Real Time 15 SP2jackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Real Time 15 SP2jackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Real Time 15 SP2jackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Real Time 15 SP2jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Server 15 SP2-BCLjackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-BCLjackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-BCLjackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Server 15 SP2-BCLjackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Server 15 SP2-LTSSjackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-LTSSjackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Server 15 SP2-LTSSjackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Server 15 SP2-LTSSjackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Linux Enterprise Server for SAP Applications 15 SP2jackson-annotations2.13.0-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2jackson-core2.13.0-150200.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2jackson-databind2.13.0-150200.3.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Manager Proxy 4.1jackson-annotations2.13.0-150200.3.6.1
SUSE Manager Proxy 4.1jackson-core2.13.0-150200.3.6.1
SUSE Manager Proxy 4.1jackson-databind2.13.0-150200.3.9.1
SUSE Manager Proxy 4.1jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Manager Retail Branch Server 4.1jackson-annotations2.13.0-150200.3.6.1
SUSE Manager Retail Branch Server 4.1jackson-core2.13.0-150200.3.6.1
SUSE Manager Retail Branch Server 4.1jackson-databind2.13.0-150200.3.9.1
SUSE Manager Retail Branch Server 4.1jackson-dataformats-binary2.13.0-150200.3.3.3
SUSE Manager Server 4.1jackson-annotations2.13.0-150200.3.6.1
SUSE Manager Server 4.1jackson-core2.13.0-150200.3.6.1
SUSE Manager Server 4.1jackson-databind2.13.0-150200.3.9.1
SUSE Manager Server 4.1jackson-dataformats-binary2.13.0-150200.3.3.3
Ubuntu 16.04 LTSjackson-dataformat-cborno fix
Ubuntu 18.04 LTSjackson-dataformat-cborno fix
Ubuntu 20.04 LTSjackson-dataformat-cborno fix
Ubuntu 22.04 LTSjackson-dataformat-cborno fix
Ubuntu 24.04 LTSjackson-dataformat-cborno fix
Ubuntu 25.10jackson-dataformat-cborno fix
Ubuntu 26.04 LTSjackson-dataformat-cborno fix
Ubuntu 26.10jackson-dataformat-cborno fix
openSUSE Leap 15.3jackson-annotations2.13.0-150200.3.6.1
openSUSE Leap 15.3jackson-bom2.13.0-150200.3.3.1
openSUSE Leap 15.3jackson-core2.13.0-150200.3.6.1
openSUSE Leap 15.3jackson-databind2.13.0-150200.3.9.1
openSUSE Leap 15.3jackson-dataformats-binary2.13.0-150200.3.3.3
openSUSE Leap 15.4jackson-annotations2.13.0-150200.3.6.1
openSUSE Leap 15.4jackson-bom2.13.0-150200.3.3.1
openSUSE Leap 15.4jackson-core2.13.0-150200.3.6.1
openSUSE Leap 15.4jackson-databind2.13.0-150200.3.9.1
openSUSE Leap 15.4jackson-dataformats-binary2.13.0-150200.3.3.3