Miembros de
Boletines de Vulnerabilidades |
DSA-4004 jackson-databind - security update |
|
| Software afectado | Debian |
|
Liao Xinxi discovered that jackson-databind, a Java library used toparse JSON and other data formats, did not properly validate userinput before attemtping deserialization. This allowed an attacker toperform code execution by providing maliciously crafted input. More info: https://www.debian.org/security/2017/dsa-4004 |
|
