CVE:CVE-2022-42003
CNNVD:CNNVD-202210-007
FasterXML jackson-databind是FasterXML的一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。
FasterXML jackson-databind 2.14.0-rc1之前版本存在代码问题漏洞。攻击者利用该漏洞导致资源耗尽。
solution:Upgrade fasterxml jackson-databind to a higher version than 2.12.7.1,2.13.4.1,and avoid the version (,2.12.7.1),[2.13.0,2.13.4.1); Upgrade quarkus quarkus to a higher version than 2.13.3,and avoid the version (,2.13.3); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp oncommand_workflow_automation to a higher version than -