crítica
CVE-2019-16943
jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, GHSA. Más baja según Red Hat (media), AlmaLinux (media), Oracle (media), Rocky Linux (media), Ubuntu (media).
Descripción
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections, pki-deps:10.6::apache-commons-lang, pki-deps:10.6::bea-stax-api y 25 más | 3.2.2-10.module_el8.5.0+2577+9e95fe00 y 20 más |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections, apache-commons-lang, bea-stax-api y 43 más | 3.2.2-10.module+el8.2.0+5508+146760da y 27 más |
| Red Hat | elasticsearch-cloud-kubernetes, opendaylight, openshift-elasticsearch-plugin y 2 más | sin corrección indicada |
Mostrar las 121 entradas de 14 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| maven::GitHub Security Advisory Maven | com.fasterxml.jackson.core:jackson-databind | 2.9.10.1, 2.8.11.5, 2.6.7.3 |
| alma 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::velocity | 1.7-24.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module_el8.5.0+2577+9e95fe00 |
| alma 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 |
| debian 10 | jackson-databind | 2.9.8-3+deb10u1 |
| debian 11 | jackson-databind | 2.10.0-2 |
| debian 12 | jackson-databind | 2.10.0-2 |
| debian 13 | jackson-databind | 2.10.0-2 |
| debian 14 | jackson-databind | 2.10.0-2 |
| debian 8 | jackson-databind | 2.4.2-2+deb8u9 |
| debian 9 | jackson-databind | 2.8.6-1+deb9u6 |
| echo | jackson-databind | 2.10.0-2 |
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-core | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-runtime | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | glassfish-jaxb-txw2 | 2.2.11-11.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-annotations | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-core | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-databind | 2.10.0-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-json-provider | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | javassist-javadoc | 3.18.1-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | jss | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | jss-javadoc | 4.6.2-4.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | ldapjdk-javadoc | 4.21.0-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-base-java | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-ca | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-kra | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-server | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-servlet-4.0-api | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-servlet-engine | 1:9.0.7-16.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | pki-symkey | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | pki-tools | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | python-nss-doc | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-nss | 1.0.1-10.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | python3-pki | 10.8.3-1.0.1.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | slf4j-jdk14 | 1.7.25-4.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | tomcatjss | 7.4.1-2.module+el8.2.0+5594+09d37207 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5508+146760da |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.2.0+5508+146760da |
| Red Hat | elasticsearch-cloud-kubernetes | sin corrección indicada |
| Red Hat | opendaylight | sin corrección indicada |
| Red Hat | openshift-elasticsearch-plugin | sin corrección indicada |
| Red Hat | rh-maven35-jackson-databind | sin corrección indicada |
| Red Hat | rh-maven35-jackson-databind-javadoc | sin corrección indicada |
| rocky 8 | maven:3.5::slf4j | 1.7.25-4.module+el8.3.0+133+b8b54b58 |
| rocky 8 | pki-deps:10.6::apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::bea-stax-api | 1.2.0-16.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-core | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-runtime | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::glassfish-jaxb-txw2 | 2.2.11-11.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-annotations | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-core | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-databind | 2.10.0-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-json-provider | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::javassist-javadoc | 3.18.1-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python-nss-doc | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::python3-nss | 1.0.1-10.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::slf4j | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::slf4j-jdk14 | 1.7.25-4.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::velocity | 1.7-24.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xml-commons-apis | 1.4.01-25.module+el8.5.0+697+f586bb30 |
| rocky 8 | pki-deps:10.6::xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 |
| rocky 8 | pki-deps:10.6::xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 |
| ubuntu 16.04-ESM | jackson-databind | 2.4.2-3ubuntu0.1~esm2 |
Referencias
- https://access.redhat.com/errata/RHSA-2020:0159
- https://access.redhat.com/errata/RHSA-2020:0160
- https://access.redhat.com/errata/RHSA-2020:0161
- https://access.redhat.com/errata/RHSA-2020:0164
- https://access.redhat.com/errata/RHSA-2020:0445
- https://access.redhat.com/errata/RHSA-2020:1644
- https://access.redhat.com/security/cve/CVE-2019-16943
- https://bugzilla.redhat.com/1535313
Las 100 referencias
- https://bugzilla.redhat.com/1655438
- https://bugzilla.redhat.com/1656786
- https://bugzilla.redhat.com/1698084
- https://bugzilla.redhat.com/1744095
- https://bugzilla.redhat.com/1755831
- https://bugzilla.redhat.com/1755849
- https://bugzilla.redhat.com/1758187
- https://bugzilla.redhat.com/1758191
- https://bugzilla.redhat.com/1767125
- https://bugzilla.redhat.com/1767131
- https://bugzilla.redhat.com/1775293
- https://bugzilla.redhat.com/1777032
- https://bugzilla.redhat.com/1782486
- https://bugzilla.redhat.com/1793154
- https://bugzilla.redhat.com/1795215
- https://bugzilla.redhat.com/1802006
- https://bugzilla.redhat.com/1806840
- https://bugzilla.redhat.com/1807371
- https://bugzilla.redhat.com/1807421
- https://bugzilla.redhat.com/1809210
- https://bugzilla.redhat.com/1815470
- https://bugzilla.redhat.com/1815495
- https://bugzilla.redhat.com/1816330
- https://bugzilla.redhat.com/1816332
- https://bugzilla.redhat.com/1816337
- https://bugzilla.redhat.com/1816340
- https://bugzilla.redhat.com/show_bug.cgi?id=1535313
- https://bugzilla.redhat.com/show_bug.cgi?id=1655438
- https://bugzilla.redhat.com/show_bug.cgi?id=1656786
- https://bugzilla.redhat.com/show_bug.cgi?id=1698084
- https://bugzilla.redhat.com/show_bug.cgi?id=1744095
- https://bugzilla.redhat.com/show_bug.cgi?id=1755831
- https://bugzilla.redhat.com/show_bug.cgi?id=1755849
- https://bugzilla.redhat.com/show_bug.cgi?id=1758187
- https://bugzilla.redhat.com/show_bug.cgi?id=1758191
- https://bugzilla.redhat.com/show_bug.cgi?id=1767125
- https://bugzilla.redhat.com/show_bug.cgi?id=1767131
- https://bugzilla.redhat.com/show_bug.cgi?id=1775293
- https://bugzilla.redhat.com/show_bug.cgi?id=1777032
- https://bugzilla.redhat.com/show_bug.cgi?id=1782486
- https://bugzilla.redhat.com/show_bug.cgi?id=1795215
- https://bugzilla.redhat.com/show_bug.cgi?id=1802006
- https://bugzilla.redhat.com/show_bug.cgi?id=1806840
- https://bugzilla.redhat.com/show_bug.cgi?id=1807371
- https://bugzilla.redhat.com/show_bug.cgi?id=1807421
- https://bugzilla.redhat.com/show_bug.cgi?id=1809210
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16335
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16942
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16943
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17531
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20330
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10672
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10673
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8840
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9546
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9547
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9548
- https://errata.almalinux.org/8/ALSA-2020-1644.html
- https://errata.rockylinux.org/RLSA-2020:1644
- https://github.com/FasterXML/jackson-databind
- https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b
- https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f
- https://github.com/FasterXML/jackson-databind/issues/2478
- https://linux.oracle.com/cve/CVE-2019-16943.html
- https://linux.oracle.com/errata/ELSA-2020-1644.html
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/5ec8d8d485c2c8ac55ea425f4cd96596ef37312532712639712ebcdd@%3Ccommits.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/6788e4c991f75b89d290ad06b463fcd30bcae99fee610345a35b7bc6@%3Cissues.iceberg.apache.org%3E
- https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/
- https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062
- https://nvd.nist.gov/vuln/detail/CVE-2019-16943
- https://seclists.org/bugtraq/2019/Oct/6
- https://security.netapp.com/advisory/ntap-20191017-0006
- https://security.netapp.com/advisory/ntap-20191017-0006/
- https://ubuntu.com/security/notices/USN-4813-1
- https://www.cve.org/CVERecord?id=CVE-2019-16943
- https://www.debian.org/security/2019/dsa-4542
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html