CVE-2019-14540: Debian Linux

Critical severity, CVSS 9.8. EPSS: 10.8% chance of exploitation in the next 30 days.

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Affected products

  • Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
  • Fasterxml Jackson-Databind: from 2.0.0, before 2.6.7.3 (fixed in 2.6.7.3); from 2.7.0, before 2.8.11.5 (fixed in 2.8.11.5); from 2.9.0, before 2.9.10 (fixed in 2.9.10)
  • Fedoraproject Fedora: version 30 only; version 31 only
  • Netapp Oncommand API Services: affected versions not specified
  • Netapp Oncommand Workflow Automation: affected versions not specified
  • Netapp Steelstore Cloud Integrated Storage: affected versions not specified
  • Oracle Banking Platform: version 2.4.0 only; version 2.4.1 only; version 2.5.0 only; version 2.6.0 only; version 2.6.1 only; version 2.7.0 only; …
  • Oracle Customer Management And Segmentation Foundation: version 18.0 only
  • Oracle Financial Services Analytical Applications Infrastructure: from 8.0.2, up to and including 8.0.8
  • Oracle Global Lifecycle Management Opatch: before 11.2.0.3.23 (fixed in 11.2.0.3.23); from 12.2.0.1.0, before 12.2.0.1.19 (fixed in 12.2.0.1.19); from 13.9.4.0.0, before 13.9.4.2.1 (fixed in 13.9.4.2.1)
  • Oracle Goldengate Application Adapters: version 19.1.0.0.0 only
  • Oracle Goldengate Stream Analytics: before 19.1.0.0.1 (fixed in 19.1.0.0.1)
  • Oracle MySQL: from 5.7.0, up to and including 5.7.30; from 8.0.0, up to and including 8.0.20
  • Oracle Primavera Gateway: version 15.2 only; version 15.2.18 only; version 16.2 only; version 16.2.11 only; version 17.12 only; version 17.12.6 only; …
  • Oracle Primavera Unifier: from 17.7, up to and including 17.12; version 16.1 only; version 16.2 only; version 18.8 only; version 19.12 only
  • Oracle Retail Customer Management And Segmentation Foundation: version 17.0 only
  • Oracle Retail Xstore Point Of Service: version 7.1 only; version 15.0 only; version 16.0 only; version 17.0 only; version 18.0 only
  • Oracle WebLogic Server: version 12.2.1.3.0 only
  • Red Hat JBoss Enterprise Application Platform: version 7.2 only; version 7.3 only

Published 2019-09-15. Last modified 2026-10-08.