jackson-core contains core low-level incremental (streaming) parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large. jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document, defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Name | Vendor | Start Version | End Version |
---|---|---|---|
OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-0:2.504.2.1750932984-3.el8 | * |
OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-2-plugins-0:4.12.1750933270-1.el8 | * |
OCP-Tools-4.13-RHEL-8 | RedHat | jenkins-0:2.504.2.1750916374-3.el8 | * |
OCP-Tools-4.13-RHEL-8 | RedHat | jenkins-2-plugins-0:4.13.1750916671-1.el8 | * |
OCP-Tools-4.14-RHEL-8 | RedHat | jenkins-0:2.504.2.1750903189-3.el8 | * |
OCP-Tools-4.14-RHEL-8 | RedHat | jenkins-2-plugins-0:4.14.1750903529-1.el8 | * |
OCP-Tools-4.15-RHEL-8 | RedHat | jenkins-0:2.504.2.1750856366-3.el8 | * |
OCP-Tools-4.15-RHEL-8 | RedHat | jenkins-2-plugins-0:4.15.1750856638-1.el8 | * |
OCP-Tools-4.16-RHEL-9 | RedHat | jenkins-0:2.504.2.1750857144-3.el9 | * |
OCP-Tools-4.16-RHEL-9 | RedHat | jenkins-2-plugins-0:4.16.1750857315-1.el9 | * |
OCP-Tools-4.17-RHEL-9 | RedHat | jenkins-0:2.504.2.1750851690-3.el9 | * |
OCP-Tools-4.17-RHEL-9 | RedHat | jenkins-2-plugins-0:4.17.1750851950-1.el9 | * |
OCP-Tools-4.18-RHEL-9 | RedHat | jenkins-0:2.504.2.1750846524-3.el9 | * |
OCP-Tools-4.18-RHEL-9 | RedHat | jenkins-2-plugins-0:4.18.1750846854-1.el9 | * |
Jackson-core | Ubuntu | oracular | * |