Kwetsbaarheden verholpen in Oracle Java

Summary

Details

Vulnerabilities 9

• High 8.8
  CVE-2023-42950

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Mar 28, 2024
• High 8.1
  CVE-2024-36138

  Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions…

  Node.js node nodejs-16 nodejs-21 Wolfi
  Sep 7, 2024
• High 7.5
  CVE-2024-25062

  An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

  qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2024
• Medium 5.5
  CVE-2023-7104

  SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

  A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer …

  SQLite SQLite3 qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Azure Linux Alpine
  Dec 25, 2023
• Medium 4.8
  CVE-2024-21235

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21208

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21210

  Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21211

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE GraalVM openjdk17 Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21217

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024

Revision history

1. 2024-10-17 #0

   Initiele versie

References

• Reference - cveprojectv5; hkcert; nvd; oracle; redhat
  https://www.oracle.com/security-alerts/cpuoct2024.html