CVE-2020-24616: Debian Linux

High severity, CVSS 8.1. EPSS: 7.6% chance of exploitation in the next 30 days.

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

Affected products

Debian Debian Linux: version 9.0 only
Fasterxml Jackson-Databind: from 2.0.0, before 2.9.10.6 (fixed in 2.9.10.6)
Netapp Active Iq Unified Manager: affected versions not specified
Oracle Agile Product Lifecycle Management: version 9.3.6 only
Oracle Application Testing Suite: version 13.3.0.1 only
Oracle Autovue For Agile Product Lifecycle Management: version 21.0.2 only
Oracle Banking Liquidity Management: version 14.2 only; version 14.3 only; version 14.5 only
Oracle Banking Supply Chain Finance: version 14.2 only; version 14.3 only; version 14.5 only
Oracle Blockchain Platform: before 21.1.2 (fixed in 21.1.2)
Oracle Communications Calendar Server: version 8.0 only; version 8.0.0.4.0 only
Oracle Communications Cloud Native Core Unified Data Repository: version 1.4.0 only
Oracle Communications Contacts Server: version 8.0 only; version 8.0.0.5.0 only
Oracle Communications Diameter Signaling Router: from 8.0.0, up to and including 8.2.2
Oracle Communications Element Manager: from 8.2.0, up to and including 8.2.4.0
Oracle Communications Evolved Communications Application Server: version 7.1 only
Oracle Communications Instant Messaging Server: version 10.0.1.5.0 only
Oracle Communications Messaging Server: version 8.1 only
Oracle Communications Offline Mediation Controller: version 12.0.0.3 only
Oracle Communications Policy Management: version 12.5.0 only
Oracle Communications Pricing Design Center: version 12.0.0.4.0 only
Oracle Communications Services Gatekeeper: version 7.0 only
Oracle Communications Session Report Manager: from 8.0.0.0, up to and including 8.2.2.1
Oracle Communications Unified Inventory Management: version 7.4.1 only
Oracle Identity Manager Connector: version 11.1.1.5.0 only
Oracle Siebel UI Framework: up to and including 21.2

Published 2020-08-25. Last modified 2026-10-08.