CVE-2022-25647: Deserialization of Untrusted Data
Published May 1, 2022
·Updated
A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes. This issue may lead to availability attacks.
Other sources
Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the writeReplace() method, a remote attacker could exploit this vulnerability to cause a denial of service.
— IBM
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
— Ubuntu
Affected Software
209 affected componentsFixes available
redhat/jenkins<2-plugins-0:4.13.1684911916-1.el8
2-plugins-0:4.13.1684911916-1.el8
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el8ea
0:2.8.9-1.redhat_00001.1.el8ea
redhat/eap7<0:1-18.el9ea
0:1-18.el9ea
redhat/eap7-activemq-artemis<0:2.16.0-9.redhat_00042.1.el9ea
0:2.16.0-9.redhat_00042.1.el9ea
redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el9ea
1:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-aesh-extensions<0:1.8.0-1.redhat_00001.1.el9ea
0:1.8.0-1.redhat_00001.1.el9ea
redhat/eap7-aesh-readline<0:2.2.0-1.redhat_00001.1.el9ea
0:2.2.0-1.redhat_00001.1.el9ea
redhat/eap7-agroal<0:1.3.0-1.redhat_00001.1.el9ea
0:1.3.0-1.redhat_00001.1.el9ea
redhat/eap7-antlr<0:2.7.7-54.redhat_7.1.el9ea
0:2.7.7-54.redhat_7.1.el9ea
redhat/eap7-apache-commons-beanutils<0:1.9.4-1.redhat_00002.1.el9ea
0:1.9.4-1.redhat_00002.1.el9ea
redhat/eap7-apache-commons-cli<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-codec<0:1.15.0-1.redhat_00001.1.el9ea
0:1.15.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-collections<0:3.2.2-9.redhat_2.1.el9ea
0:3.2.2-9.redhat_2.1.el9ea
redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el9ea
0:2.10.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang<0:3.11.0-1.redhat_00001.1.el9ea
0:3.11.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang2<0:2.6.0-1.redhat_7.1.el9ea
0:2.6.0-1.redhat_7.1.el9ea
redhat/eap7-apache-cxf<0:3.3.13-1.redhat_00001.1.el9ea
0:3.3.13-1.redhat_00001.1.el9ea
redhat/eap7-apache-cxf-xjc-utils<0:3.3.1-1.1.redhat_00001.1.el9ea
0:3.3.1-1.1.redhat_00001.1.el9ea
redhat/eap7-apache-mime4j<0:0.6.0-4.1.redhat_7.1.el9ea
0:0.6.0-4.1.redhat_7.1.el9ea
redhat/eap7-apache-sshd<0:2.7.0-1.redhat_00001.1.el9ea
0:2.7.0-1.redhat_00001.1.el9ea
redhat/eap7-artemis-native<1:1.0.2-3.redhat_1.el9ea
1:1.0.2-3.redhat_1.el9ea
redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el9ea
0:1.0.4-1.redhat_00001.1.el9ea
redhat/eap7-atinject<0:1.0.3-1.redhat_00001.1.el9ea
0:1.0.3-1.redhat_00001.1.el9ea
redhat/eap7-avro<0:1.7.6-7.1.redhat_2.1.el9ea
0:1.7.6-7.1.redhat_2.1.el9ea
redhat/eap7-azure-storage<0:8.6.6-1.1.redhat_00001.1.el9ea
0:8.6.6-1.1.redhat_00001.1.el9ea
redhat/eap7-bouncycastle<0:1.68.0-2.redhat_00005.1.el9ea
0:1.68.0-2.redhat_00005.1.el9ea
redhat/eap7-byte-buddy<0:1.11.12-2.redhat_00002.1.el9ea
0:1.11.12-2.redhat_00002.1.el9ea
redhat/eap7-caffeine<0:2.8.8-1.redhat_00001.1.el9ea
0:2.8.8-1.redhat_00001.1.el9ea
redhat/eap7-cal10n<0:0.8.1-6.redhat_1.1.el9ea
0:0.8.1-6.redhat_1.1.el9ea
redhat/eap7-codehaus-jackson<0:1.9.13-10.redhat_00007.1.el9ea
0:1.9.13-10.redhat_00007.1.el9ea
redhat/eap7-commons-logging-jboss-logging<0:1.0.0-1.Final_redhat_1.1.el9ea
0:1.0.0-1.Final_redhat_1.1.el9ea
redhat/eap7-cryptacular<0:1.2.4-1.redhat_00001.1.el9ea
0:1.2.4-1.redhat_00001.1.el9ea
redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el9ea
0:2.1.3-1.redhat_00001.1.el9ea
redhat/eap7-ecj<1:3.26.0-1.redhat_00002.1.el9ea
1:3.26.0-1.redhat_00002.1.el9ea
redhat/eap7-eclipse-jgit<0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
redhat/eap7-elytron-web<0:1.9.2-2.Final_redhat_00001.1.el9ea
0:1.9.2-2.Final_redhat_00001.1.el9ea
redhat/eap7-fge-btf<0:1.2.0-1.redhat_00007.1.el9ea
0:1.2.0-1.redhat_00007.1.el9ea
redhat/eap7-fge-msg-simple<0:1.1.0-1.redhat_00007.1.el9ea
0:1.1.0-1.redhat_00007.1.el9ea
redhat/eap7-glassfish-concurrent<0:1.1.1-1.redhat_00001.1.el9ea
0:1.1.1-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-fastinfoset<0:1.2.13-11.1.redhat_1.1.el9ea
0:1.2.13-11.1.redhat_1.1.el9ea
redhat/eap7-glassfish-jaf<0:1.2.2-1.redhat_00001.1.el9ea
0:1.2.2-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-javamail<0:1.6.5-1.redhat_00001.1.el9ea
0:1.6.5-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-jaxb<0:2.3.3-4.1.b02_redhat_00001.1.el9ea
0:2.3.3-4.1.b02_redhat_00001.1.el9ea
redhat/eap7-glassfish-jsf<0:2.3.14-4.SP05_redhat_00001.1.el9ea
0:2.3.14-4.SP05_redhat_00001.1.el9ea
redhat/eap7-glassfish-json<0:1.1.6-2.redhat_00001.1.el9ea
0:1.1.6-2.redhat_00001.1.el9ea
redhat/eap7-gnu-getopt<0:1.0.13-6.redhat_5.1.el9ea
0:1.0.13-6.redhat_5.1.el9ea
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el9ea
0:2.8.9-1.redhat_00001.1.el9ea
redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el9ea
0:1.0.1-1.redhat_00002.1.el9ea
redhat/eap7-guava-libraries<0:30.1.0-1.1.redhat_00001.1.el9ea
0:30.1.0-1.1.redhat_00001.1.el9ea
redhat/eap7-h2database<0:1.4.197-2.redhat_00004.1.el9ea
0:1.4.197-2.redhat_00004.1.el9ea
redhat/eap7-hal-console<0:3.3.13-1.Final_redhat_00001.1.el9ea
0:3.3.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate<0:5.3.27-1.Final_redhat_00001.1.el9ea
0:5.3.27-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-beanvalidation-api<0:2.0.2-1.redhat_00001.1.el9ea
0:2.0.2-1.redhat_00001.1.el9ea
redhat/eap7-hibernate-commons-annotations<0:5.0.5-1.1.Final_redhat_00002.1.el9ea
0:5.0.5-1.1.Final_redhat_00002.1.el9ea
redhat/eap7-hibernate-search<0:5.10.7-1.1.Final_redhat_00001.1.el9ea
0:5.10.7-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-validator<0:6.0.23-1.Final_redhat_00001.1.el9ea
0:6.0.23-1.Final_redhat_00001.1.el9ea
redhat/eap7-hornetq<0:2.4.8-1.Final_redhat_00001.1.el9ea
0:2.4.8-1.Final_redhat_00001.1.el9ea
redhat/eap7-httpcomponents-asyncclient<0:4.1.4-1.1.redhat_00001.1.el9ea
0:4.1.4-1.1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el9ea
0:4.5.13-1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-core<0:4.4.14-1.redhat_00001.1.el9ea
0:4.4.14-1.redhat_00001.1.el9ea
redhat/eap7-infinispan<0:11.0.15-1.Final_redhat_00001.1.el9ea
0:11.0.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-ironjacamar<0:1.5.3-2.SP1_redhat_00001.1.el9ea
0:1.5.3-2.SP1_redhat_00001.1.el9ea
redhat/eap7-jackson-annotations<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-core<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-coreutils<0:1.8.0-1.redhat_00002.1.el9ea
0:1.8.0-1.redhat_00002.1.el9ea
redhat/eap7-jackson-databind<0:2.12.6.1-2.redhat_00004.1.el9ea
0:2.12.6.1-2.redhat_00004.1.el9ea
redhat/eap7-jackson-jaxrs-providers<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-base<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-java8<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jakarta-el<0:3.0.3-3.redhat_00007.1.el9ea
0:3.0.3-3.redhat_00007.1.el9ea
redhat/eap7-jakarta-security-enterprise-api<0:1.0.2-3.redhat_00001.1.el9ea
0:1.0.2-3.redhat_00001.1.el9ea
redhat/eap7-jandex<0:2.4.2-1.Final_redhat_00001.1.el9ea
0:2.4.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jansi<0:1.18.0-1.redhat_00001.1.el9ea
0:1.18.0-1.redhat_00001.1.el9ea
redhat/eap7-jasypt<0:1.9.3-1.redhat_00002.1.el9ea
0:1.9.3-1.redhat_00002.1.el9ea
redhat/eap7-java-classmate<0:1.5.1-1.redhat_00001.1.el9ea
0:1.5.1-1.redhat_00001.1.el9ea
redhat/eap7-javaee-jpa-spec<0:2.2.3-1.redhat_00001.1.el9ea
0:2.2.3-1.redhat_00001.1.el9ea
redhat/eap7-javaee-security-soteria<0:1.0.1-3.redhat_00002.1.el9ea
0:1.0.1-3.redhat_00002.1.el9ea
redhat/eap7-javaewah<0:1.1.7-1.redhat_00001.1.el9ea
0:1.1.7-1.redhat_00001.1.el9ea
redhat/eap7-javapackages-tools<0:3.4.1-5.15.6.el9ea
0:3.4.1-5.15.6.el9ea
redhat/eap7-javassist<0:3.27.0-2.GA_redhat_00001.1.el9ea
0:3.27.0-2.GA_redhat_00001.1.el9ea
redhat/eap7-jaxbintros<0:1.0.3-1.GA_redhat_00001.1.el9ea
0:1.0.3-1.GA_redhat_00001.1.el9ea
redhat/eap7-jaxen<0:1.1.6-14.redhat_2.1.el9ea
0:1.1.6-14.redhat_2.1.el9ea
redhat/eap7-jberet<0:1.3.9-2.SP2_redhat_00001.1.el9ea
0:1.3.9-2.SP2_redhat_00001.1.el9ea
redhat/eap7-jboss-aesh<0:2.4.0-1.redhat_00001.1.el9ea
0:2.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jboss-classfilewriter<0:1.2.5-1.Final_redhat_00001.1.el9ea
0:1.2.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-common-beans<0:2.0.1-1.Final_redhat_00001.1.el9ea
0:2.0.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-dmr<0:1.5.1-1.Final_redhat_00001.1.el9ea
0:1.5.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb3-ext-api<0:2.3.0-1.Final_redhat_00001.1.el9ea
0:2.3.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb-client<0:4.0.44-1.Final_redhat_00001.1.el9ea
0:4.0.44-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-genericjms<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-iiop-client<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jboss-invocation<0:1.6.3-1.Final_redhat_00001.1.el9ea
0:1.6.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logging<0:3.4.1-2.Final_redhat_00001.1.el9ea
0:3.4.1-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logmanager<0:2.1.18-1.Final_redhat_00001.1.el9ea
0:2.1.18-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-marshalling<0:2.0.12-1.1.Final_redhat_00001.1.el9ea
0:2.0.12-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-metadata<0:13.0.0-1.Final_redhat_00001.1.el9ea
0:13.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-modules<0:1.12.0-2.Final_redhat_00001.1.el9ea
0:1.12.0-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-msc<0:1.4.12-1.Final_redhat_00001.1.el9ea
0:1.4.12-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-openjdk-orb<0:8.1.4-3.Final_redhat_00002.1.el9ea
0:8.1.4-3.Final_redhat_00002.1.el9ea
redhat/eap7-jboss-remoting<0:5.0.25-1.SP1_redhat_00001.1.el9ea
0:5.0.25-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jboss-remoting-jmx<0:3.0.4-1.Final_redhat_00001.1.el9ea
0:3.0.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-seam-int<0:7.0.0-6.GA_redhat_2.1.el9ea
0:7.0.0-6.GA_redhat_2.1.el9ea
redhat/eap7-jboss-security-negotiation<0:3.0.6-1.Final_redhat_00001.1.el9ea
0:3.0.6-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-security-xacml<0:2.0.8-17.Final_redhat_8.1.el9ea
0:2.0.8-17.Final_redhat_8.1.el9ea
redhat/eap7-jboss-server-migration<0:1.10.0-18.Final_redhat_00017.1.el9ea
0:1.10.0-18.Final_redhat_00017.1.el9ea
redhat/eap7-jboss-stdio<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-threads<0:2.4.0-1.Final_redhat_00001.1.el9ea
0:2.4.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-transaction-spi<0:7.6.0-2.Final_redhat_1.1.el9ea
0:7.6.0-2.Final_redhat_1.1.el9ea
redhat/eap7-jboss-vfs<0:3.2.16-1.Final_redhat_00001.1.el9ea
0:3.2.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-weld<3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
redhat/eap7-jbossws-api<0:1.1.2-1.Final_redhat_00001.1.el9ea
0:1.1.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common<0:3.3.3-1.Final_redhat_00001.1.el9ea
0:3.3.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common-tools<0:1.3.2-1.Final_redhat_00001.1.el9ea
0:1.3.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-cxf<0:5.4.4-1.Final_redhat_00001.1.el9ea
0:5.4.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-jaxws-undertow-httpspi<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jbossws-spi<0:3.3.1-1.Final_redhat_00001.1.el9ea
0:3.3.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-xnio-base<0:3.8.7-1.SP1_redhat_00001.1.el9ea
0:3.8.7-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jcip-annotations<0:1.0.0-5.redhat_8.1.el9ea
0:1.0.0-5.redhat_8.1.el9ea
redhat/eap7-jctools<0:2.1.2-1.redhat_00003.1.el9ea
0:2.1.2-1.redhat_00003.1.el9ea
redhat/eap7-jettison<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jgroups<0:4.2.15-1.Final_redhat_00001.1.el9ea
0:4.2.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-azure<0:1.3.1-1.1.Final_redhat_00001.1.el9ea
0:1.3.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-kubernetes<0:1.0.16-1.Final_redhat_00001.1.el9ea
0:1.0.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-joda-time<0:2.9.7-2.redhat_1.1.el9ea
0:2.9.7-2.redhat_1.1.el9ea
redhat/eap7-jsonb-spec<0:1.0.2-1.redhat_00001.1.el9ea
0:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-json-patch<0:1.9.0-1.redhat_00002.1.el9ea
0:1.9.0-1.redhat_00002.1.el9ea
redhat/eap7-jsoup<0:1.14.2-1.redhat_00002.1.el9ea
0:1.14.2-1.redhat_00002.1.el9ea
redhat/eap7-jul-to-slf4j-stub<0:1.0.1-7.Final_redhat_3.1.el9ea
0:1.0.1-7.Final_redhat_3.1.el9ea
redhat/eap7-log4j<0:2.17.1-2.redhat_00002.1.el9ea
0:2.17.1-2.redhat_00002.1.el9ea
redhat/eap7-log4j2-jboss-logmanager<0:1.0.0-1.Final_redhat_00001.1.el9ea
0:1.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-log4j-jboss-logmanager<0:1.2.2-1.Final_redhat_00002.1.el9ea
0:1.2.2-1.Final_redhat_00002.1.el9ea
redhat/eap7-lucene-solr<0:5.5.5-3.redhat_2.1.el9ea
0:5.5.5-3.redhat_2.1.el9ea
redhat/eap7-mustache-java<0:0.9.6-1.1.redhat_00001.1.el9ea
0:0.9.6-1.1.redhat_00001.1.el9ea
redhat/eap7-narayana<0:5.11.4-1.Final_redhat_00001.1.el9ea
0:5.11.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-neethi<0:3.1.1-1.1.redhat_1.1.el9ea
0:3.1.1-1.1.redhat_1.1.el9ea
redhat/eap7-netty<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-tcnative<0:2.0.52-1.Final_redhat_00001.1.el9ea
0:2.0.52-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-transport-native-epoll<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-xnio-transport<0:0.1.9-1.Final_redhat_00001.1.el9ea
0:0.1.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-objectweb-asm<0:9.1.0-1.redhat_00002.1.el9ea
0:9.1.0-1.redhat_00002.1.el9ea
redhat/eap7-opensaml<0:3.3.1-1.1.redhat_00002.1.el9ea
0:3.3.1-1.1.redhat_00002.1.el9ea
redhat/eap7-picketbox<0:5.0.3-10.Final_redhat_00009.1.el9ea
0:5.0.3-10.Final_redhat_00009.1.el9ea
redhat/eap7-picketbox-commons<0:1.0.0-4.final_redhat_5.1.el9ea
0:1.0.0-4.final_redhat_5.1.el9ea
redhat/eap7-picketlink-bindings<0:2.5.5-26.SP12_redhat_00014.1.el9ea
0:2.5.5-26.SP12_redhat_00014.1.el9ea
redhat/eap7-picketlink-federation<0:2.5.5-21.SP12_redhat_00011.1.el9ea
0:2.5.5-21.SP12_redhat_00011.1.el9ea
redhat/eap7-protostream<0:4.3.5-1.Final_redhat_00001.1.el9ea
0:4.3.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-reactive-streams<0:1.0.3-2.redhat_00003.1.el9ea
0:1.0.3-2.redhat_00003.1.el9ea
redhat/eap7-reactivex-rxjava<0:3.0.9-1.redhat_00001.1.el9ea
0:3.0.9-1.redhat_00001.1.el9ea
redhat/eap7-reactivex-rxjava2<0:2.2.20-1.redhat_00001.1.el9ea
0:2.2.20-1.redhat_00001.1.el9ea
redhat/eap7-resteasy<0:3.15.3-1.Final_redhat_00001.1.el9ea
0:3.15.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-shibboleth-java-support<0:7.3.0-1.1.redhat_00001.1.el9ea
0:7.3.0-1.1.redhat_00001.1.el9ea
redhat/eap7-slf4j<0:1.7.22-4.1.redhat_2.1.el9ea
0:1.7.22-4.1.redhat_2.1.el9ea
redhat/eap7-slf4j-jboss-logmanager<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-snakeyaml<0:1.29.0-1.redhat_00001.2.el9ea
0:1.29.0-1.redhat_00001.2.el9ea
redhat/eap7-stax2-api<0:4.2.1-1.redhat_00001.1.el9ea
0:4.2.1-1.redhat_00001.1.el9ea
redhat/eap7-stax-ex<0:1.8.3-2.redhat_00002.1.el9ea
0:1.8.3-2.redhat_00002.1.el9ea
redhat/eap7-staxmapper<0:1.3.0-2.Final_redhat_1.1.el9ea
0:1.3.0-2.Final_redhat_1.1.el9ea
redhat/eap7-sun-istack-commons<0:3.0.10-1.1.redhat_00001.1.el9ea
0:3.0.10-1.1.redhat_00001.1.el9ea
redhat/eap7-sun-saaj<1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
redhat/eap7-sun-saaj<1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
redhat/eap7-sun-ws-metadata<2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
redhat/eap7-tomcat-taglibs-standard<0:1.2.6-2.1.RC1_redhat_1.1.el9ea
0:1.2.6-2.1.RC1_redhat_1.1.el9ea
redhat/eap7-undertow<0:2.2.18-2.SP2_redhat_00001.1.el9ea
0:2.2.18-2.SP2_redhat_00001.1.el9ea
redhat/eap7-undertow-jastow<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-undertow-js<0:1.0.2-2.Final_redhat_1.1.el9ea
0:1.0.2-2.Final_redhat_1.1.el9ea
redhat/eap7-vdx<0:1.1.6-2.redhat_1.1.el9ea
0:1.1.6-2.redhat_1.1.el9ea
redhat/eap7-velocity<0:2.3.0-1.redhat_00001.1.el9ea
0:2.3.0-1.redhat_00001.1.el9ea
redhat/eap7-weld-cdi<2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
redhat/eap7-weld-core<0:3.1.6-1.1.Final_redhat_00001.1.el9ea
0:3.1.6-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly<0:7.4.6-5.GA_redhat_00002.1.el9ea
0:7.4.6-5.GA_redhat_00002.1.el9ea
redhat/eap7-wildfly-client-config<0:1.0.1-2.1.Final_redhat_00001.1.el9ea
0:1.0.1-2.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-common<0:1.5.4-1.1.Final_redhat_00001.1.el9ea
0:1.5.4-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-discovery<0:1.2.1-1.1.Final_redhat_00001.1.el9ea
0:1.2.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-elytron<0:1.15.13-1.Final_redhat_00001.1.el9ea
0:1.15.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-http-client<0:1.1.12-1.SP1_redhat_00001.1.el9ea
0:1.1.12-1.SP1_redhat_00001.1.el9ea
redhat/eap7-wildfly-naming-client<0:1.0.14-1.1.Final_redhat_00001.1.el9ea
0:1.0.14-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-openssl<0:2.2.3-1.Final_redhat_00001.1.el9ea
0:2.2.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-transaction-client<0:1.1.15-1.Final_redhat_00001.1.el9ea
0:1.1.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-woodstox-core<0:6.0.3-1.1.redhat_00001.1.el9ea
0:6.0.3-1.1.redhat_00001.1.el9ea
redhat/eap7-wsdl4j<0:1.6.3-13.redhat_2.1.el9ea
0:1.6.3-13.redhat_2.1.el9ea
redhat/eap7-wss4j<0:2.2.7-1.1.redhat_00001.1.el9ea
0:2.2.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xalan-j2<0:2.7.1-36.redhat_00013.1.el9ea
0:2.7.1-36.redhat_00013.1.el9ea
redhat/eap7-xerces-j2<0:2.12.0-3.SP04_redhat_00001.1.el9ea
0:2.12.0-3.SP04_redhat_00001.1.el9ea
redhat/eap7-xml-commons-resolver<0:1.2.0-7.redhat_12.1.el9ea
0:1.2.0-7.redhat_12.1.el9ea
redhat/eap7-xml-security<0:2.1.7-1.1.redhat_00001.1.el9ea
0:2.1.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xom<0:1.3.7-1.redhat_00001.1.el9ea
0:1.3.7-1.redhat_00001.1.el9ea
redhat/eap7-yasson<0:1.0.10-1.redhat_00001.1.el9ea
0:1.0.10-1.redhat_00001.1.el9ea
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el7ea
0:2.8.9-1.redhat_00001.1.el7ea
debian/libgoogle-gson-java<=2.8.5-3
2.8.5-3+deb10u12.8.6-1+deb11u12.10-12.10.1-1
ubuntu/libgoogle-gson-java<2.8.5-3~18.04.1~
2.8.5-3~18.04.1~
ubuntu/libgoogle-gson-java<2.8.5-3+
2.8.5-3+
ubuntu/libgoogle-gson-java<2.8.8-1ubuntu0.1
2.8.8-1ubuntu0.1
ubuntu/libgoogle-gson-java<2.4-1ubuntu0.1~
2.4-1ubuntu0.1~
IBM Cognos Analytics<=11.2.x
IBM Cognos Analytics<=11.1.x
Google gson>=2.2.3<2.8.9
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
NetApp Active Iq Unified Manager Linux
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Active Iq Unified Manager Windows
Oracle Financial Services Crime And Compliance Management Studio=8.0.8.2.0
Oracle Financial Services Crime And Compliance Management Studio=8.0.8.3.0
Oracle GraalVM=20.3.6
Oracle GraalVM=21.3.2
Oracle GraalVM=22.1.0
Oracle Retail Order Broker=18.0
Oracle Retail Order Broker=19.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
May 1, 2022
CVE Published
12:00 AM
CVE Published
via MITRE·03:30 PM
Data Sourced
via MITRE·03:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 2, 2022
Data Sourced
via Red Hat·07:18 AM
DescriptionSeverityAffected Software
May 6, 2022
Data Sourced
01:36 PM
SeverityAffected Software
Mar 12, 2024
Data Sourced
via Launchpad·05:54 PM
Description
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
1
What is the severity of CVE-2022-25647?
CVE-2022-25647 has been classified as a medium severity vulnerability due to its potential to cause denial of service attacks.
2
How do I fix CVE-2022-25647?
To fix CVE-2022-25647, update the affected packages to the specified versions or apply the recommended patches from Red Hat.
3
What are the affected applications for CVE-2022-25647?
CVE-2022-25647 affects Google Gson, particularly in versions prior to 2.8.9 and several Red Hat products using Gson.
4
Can CVE-2022-25647 lead to data breaches?
CVE-2022-25647 primarily leads to denial of service but does not directly facilitate data breach vulnerabilities.
5
Is there a workaround for CVE-2022-25647?
If immediate patching is not possible for CVE-2022-25647, review and filter untrusted data before deserialization as a potential workaround.