Skip to content
OpenAdvisories
Unscored RHSA-2009:1571 17 CVEs

Red Hat Security Advisory: java-1.5.0-sun security update

Published Sep 22, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-demo 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-devel 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-jdbc 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-plugin 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 4 rhel_extras:4 java-1.5.0-sun-src 0:1.5.0.22-1jpp.1.el4
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-demo 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-devel 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-jdbc 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-plugin 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::client java-1.5.0-sun-src 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-demo 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-devel 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-jdbc 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-plugin 0:1.5.0.22-1jpp.1.el5
Red Hat · RHEL 5 rhel_extras:5::server java-1.5.0-sun-src 0:1.5.0.22-1jpp.1.el5

Vulnerabilities 17

  • Unscored —
    CVE-2009-2409

    The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0…

    openssl nss Debian
  • Unscored —
    CVE-2009-3728

    Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java S…

  • Unscored —
    CVE-2009-3867 Public exploit EPSS 73%

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, …

  • Unscored —
    CVE-2009-3868

    Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and…

  • Unscored —
    CVE-2009-3869 Public exploit EPSS 65%

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment…

  • Unscored —
    CVE-2009-3871

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environme…

  • Unscored —
    CVE-2009-3873

    The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and J…

  • Unscored —
    CVE-2009-3874

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 befo…

  • Unscored —
    CVE-2009-3875

    The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22…

  • Unscored —
    CVE-2009-3876

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3877

    Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and J…

  • Unscored —
    CVE-2009-3879

    Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Up…

  • Unscored —
    CVE-2009-3880

    The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Up…

  • Unscored —
    CVE-2009-3881

    Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a r…

  • Unscored —
    CVE-2009-3882

    Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Updat…

  • Unscored —
    CVE-2009-3883

    Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation …

  • Unscored —
    CVE-2009-3884

    The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote …

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530061
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530098
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530173
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530296
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530300
  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://sunsolve.sun.com/search/document.do?assetkey=118666
  • article
    http://blogs.sun.com/security/entry/advance_notification_of_security_updates6
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=510197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530053
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1571.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-2409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2409
  • report
    https://access.redhat.com/security/cve/CVE-2009-3728
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3728
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3728
  • report
    https://access.redhat.com/security/cve/CVE-2009-3867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533214
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3867
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3867
  • report
    https://access.redhat.com/security/cve/CVE-2009-3868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=533215
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3868
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3868
  • report
    https://access.redhat.com/security/cve/CVE-2009-3869
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3869
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3869
  • report
    https://access.redhat.com/security/cve/CVE-2009-3871
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530063
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3871
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3871
  • report
    https://access.redhat.com/security/cve/CVE-2009-3873
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3873
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3873
  • report
    https://access.redhat.com/security/cve/CVE-2009-3874