CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

• fasterxml jackson-databind (< 2.12.6.1) • fasterxml jackson-databind (>= 2.13.0 < 2.13.2.1) • oracle big data spatial and graph (< 23.1) • oracle coherence 14.1.1.0.0 • oracle commerce platform 11.3.0 • oracle commerce platform 11.3.1 • oracle commerce platform 11.3.2 • oracle communications billing and revenue management (>= 12.0.0.4.0 <= 12.0.0.6.0) • oracle communications cloud native core binding support function 22.1.3 • oracle communications cloud native core console 1.9.0 • oracle communications cloud native core network repository function 22.1.2 • oracle communications cloud native core network repository function 22.2.0 • oracle communications cloud native core network slice selection function 22.1.0 • oracle communications cloud native core network slice selection function 22.1.1 • oracle communications cloud native core security edge protection proxy 22.1.1 • oracle communications cloud native core service communication proxy 22.2.0 • oracle communications cloud native core unified data repository 22.2.0 • oracle financial services analytical applications infrastructure (>= 8.0.7 <= 8.1.0.0) • oracle financial services analytical applications infrastructure 8.1.1.0 • oracle financial services analytical applications infrastructure 8.1.2.0 • oracle financial services analytical applications infrastructure 8.1.2.1 • oracle financial services behavior detection platform (>= 8.1.1.0 <= 8.1.2.1) • oracle financial services behavior detection platform 8.0.7.0.0 • oracle financial services behavior detection platform 8.0.8 • oracle financial services crime and compliance management studio 8.0.8.2.0 • oracle financial services crime and compliance management studio 8.0.8.3.0 • oracle financial services enterprise case management (>= 8.1.1.0 <= 8.1.2.1) • oracle financial services enterprise case management 8.0.7.1 • oracle financial services enterprise case management 8.0.7.2 • oracle financial services enterprise case management 8.0.8.0 • oracle financial services enterprise case management 8.0.8.1 • oracle financial services trade-based anti money laundering 8.0.7 • oracle financial services trade-based anti money laundering 8.0.8 • oracle global lifecycle management nextgen oui framework (< 13.9.4.2.2) • oracle global lifecycle management nextgen oui framework 13.9.4.2.2 • oracle global lifecycle management opatch (< 12.2.0.1.30) • oracle graph server and client (< 22.2.0) • oracle health sciences empirica signal 9.1.0.5.2 • oracle peoplesoft enterprise peopletools 8.58 • oracle peoplesoft enterprise peopletools 8.59 • oracle primavera gateway (>= 17.12.0 <= 17.12.11) • oracle primavera gateway (>= 18.8.0 <= 18.8.14) • oracle primavera gateway (>= 19.12.0 <= 19.12.13) • oracle primavera gateway (>= 20.12.0 <= 20.12.18) • oracle primavera gateway (>= 21.12.0 <= 21.12.1) • oracle primavera p6 enterprise project portfolio management (>= 17.12.0.0 <= 17.12.20.4) • oracle primavera p6 enterprise project portfolio management (>= 18.8.0.0 <= 18.8.25.4) • oracle primavera p6 enterprise project portfolio management (>= 19.12.0 <= 19.12.19.0) • oracle primavera p6 enterprise project portfolio management (>= 20.12.0.0 <= 21.12.4.0) • oracle primavera unifier (>= 17.0 <= 17.12) • oracle primavera unifier 18.0 • oracle primavera unifier 19.12 • oracle primavera unifier 20.12 • oracle primavera unifier 21.12 • oracle retail sales audit 15.0.3.1 • oracle sd-wan edge 9.0 • oracle sd-wan edge 9.1 • oracle spatial studio (< 20.1.0) • oracle utilities framework 4.3.0.5.0 • oracle utilities framework 4.3.0.6.0 … and 15 more