Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 7.4
  CVE-2021-3450 Public exploit EPSS 18%

  CA certificate check bypass with X509_V_FLAG_X509_STRICT

  The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded e…

  OpenSSL OpenSSL openssl openssl Debian Alpine crates.io
  Mar 25, 2021
• Medium 5.9
  CVE-2021-2161

  Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…

  Oracle Java SE JDK and JRE openjdk-9-jre openjdk-10 Ubuntu Alpine Wolfi
  Apr 22, 2021
• Medium 5.9
  CVE-2021-23841 Public exploit

  Null pointer deref in X509_issuer_and_serial_hash()

  The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io
  Feb 16, 2021
• Medium 5.3
  CVE-2021-2163

  Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 22, 2021

Revision history

1. 2025-01-21 #33

   Neue Updates aufgenommen

2. 2022-12-06 #32

   Neue Updates von F5 aufgenommen

3. 2022-11-10 #31

   Referenz(en) aufgenommen:

4. 2022-11-07 #30

   Neue Updates von IBM aufgenommen

5. 2022-10-30 #29

   Neue Updates aufgenommen

6. 2022-10-09 #28

   Neue Updates von IBM aufgenommen

7. 2022-10-06 #27

   Neue Updates von HCL aufgenommen

8. 2022-09-29 #26

   Neue Updates von Red Hat aufgenommen

9. 2022-09-06 #25

   Neue Updates von Gentoo aufgenommen

10. 2022-01-24 #24

    Neue Updates von SUSE aufgenommen

11. 2022-01-19 #23

    Korrektur

12. 2022-01-18 #22

    Neue Updates von SUSE aufgenommen

13. 2021-09-09 #21

    Neue Updates von SUSE aufgenommen

14. 2021-08-22 #20

    Neue Updates von SUSE aufgenommen

15. 2021-07-14 #19

    Neue Updates von Juniper aufgenommen

16. 2021-07-12 #18

    Neue Updates von Amazon aufgenommen

17. 2021-06-17 #17

    Neue Updates von SUSE aufgenommen

18. 2021-06-15 #16

    Neue Updates von SUSE aufgenommen

19. 2021-05-19 #15

    Neue Updates von XEROX aufgenommen

20. 2021-05-13 #14

    Neue Updates von HITACHI aufgenommen

21. 2021-05-11 #13

    Neue Updates von SUSE aufgenommen

22. 2021-05-10 #12

    Betroffene Produkte von Avaya nachgetragen

23. 2021-05-09 #11

    Neue Updates von AVAYA aufgenommen

24. 2021-05-05 #10

    Neue Updates von AVAYA aufgenommen

25. 2021-05-04 #9

    Neue Updates von AVAYA und Red Hat aufgenommen

References

• Oracle Critical Patch Update Advisory - April 2021 - Appendix Oracle Java SE vom 2021-04-20
  https://www.oracle.com/security-alerts/cpuapr2021.html#AppendixJAVA
• Red Hat Security Advisory RHSA-2021:1297 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1297
• Red Hat Security Advisory RHSA-2021:1298 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1298
• Red Hat Security Advisory RHSA-2021:1299 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1299
• Red Hat Security Advisory RHSA-2021:1301 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1301
• Red Hat Security Advisory RHSA-2021:1305 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1305
• Red Hat Security Advisory RHSA-2021:1306 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1306
• Red Hat Security Advisory RHSA-2021:1307 vom 2021-04-20
  https://access.redhat.com/errata/RHSA-2021:1307
• Oracle Linux Security Advisory ELSA-2021-1298 vom 2021-04-21
  https://linux.oracle.com/errata/ELSA-2021-1298.html
• Oracle Linux Security Advisory ELSA-2021-1297 vom 2021-04-21
  https://linux.oracle.com/errata/ELSA-2021-1297.html
• Oracle Linux Security Advisory ELSA-2021-1307 vom 2021-04-21
  https://linux.oracle.com/errata/ELSA-2021-1307.html
• Oracle Linux Security Advisory ELSA-2021-1301 vom 2021-04-21
  https://linux.oracle.com/errata/ELSA-2021-1301.html
• Red Hat Security Advisory RHSA-2021:1315 vom 2021-04-21
  https://access.redhat.com/errata/RHSA-2021:1315
• Fedora Security Advisory FEDORA-2021-65AA196C14 vom 2021-04-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2021-65aa196c14
• Fedora Security Advisory FEDORA-2021-8B80EF64F1 vom 2021-04-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2021-8b80ef64f1
• Fedora Security Advisory FEDORA-2021-6EB9BBBF0C vom 2021-04-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2021-6eb9bbbf0c
• Debian Security Advisory DLA-2634 vom 2021-04-23
  https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html
• Debian Security Advisory DSA-4899 vom 2021-04-24
  https://www.debian.org/security/2021/dsa-4899
• SUSE Security Update SUSE-SU-2021:1314-1 vom 2021-04-26
  https://lists.suse.com/pipermail/sle-security-updates/2021-April/008676.html
• Ubuntu Security Notice USN-4892-1 vom 2021-04-27
  https://ubuntu.com/security/notices/USN-4892-1
• Red Hat Security Advisory RHSA-2021:1447 vom 2021-04-28
  https://access.redhat.com/errata/RHSA-2021:1447
• Red Hat Security Advisory RHSA-2021:1446 vom 2021-04-28
  https://access.redhat.com/errata/RHSA-2021:1446
• Red Hat Security Advisory RHSA-2021:1445 vom 2021-04-28
  https://access.redhat.com/errata/RHSA-2021:1445
• Red Hat Security Advisory RHSA-2021:1444 vom 2021-04-28
  https://access.redhat.com/errata/RHSA-2021:1444
• CentOS Security Advisory CESA-2021:1297 vom 2021-04-30
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2021-1297-Moderate-CentOS-7-java-11-openjdk-Security-Update-tp4646173.html
• CentOS Security Advisory CESA-2021:1298 vom 2021-04-30
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2021-1298-Moderate-CentOS-7-java-1-8-0-openjdk-Security-Update-tp4646174.html
• AVAYA Security Advisory ASA-2021-034 vom 2021-05-03
  https://downloads.avaya.com/css/P8/documents/101075625
• Red Hat Security Advisory RHSA-2021:1429 vom 2021-05-05
  https://access.redhat.com/errata/RHSA-2021:1429
• AVAYA Security Advisory ASA-2021-032 vom 2021-05-04
  https://downloads.avaya.com/css/P8/documents/101075638
• AVAYA Security Advisory ASA-2021-040 vom 2021-05-07
  https://downloads.avaya.com/css/P8/documents/101075694
• SUSE Security Update SUSE-SU-2021:1554-1 vom 2021-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2021-May/008756.html
• Hitachi Vulnerability Information HITACHI-SEC-2021-115 vom 2021-05-14
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-115/index.html
• XEROX Security Advisory XRX21-008 vom 2021-05-19
  https://securitydocs.business.xerox.com/wp-content/uploads/2021/05/cert_XRX21-008_FFPSv7-S10_DvdUsb-Bulletin_May2021.pdf
• XEROX Security Advisory XRX21-009 vom 2021-05-19
  https://securitydocs.business.xerox.com/wp-content/uploads/2021/05/cert_XRX21-009_FFPSv9-S10_DvdUsb-Bulletin_May2021.pdf
• SUSE Security Update SUSE-SU-2021:1980-1 vom 2021-06-15
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/009020.html
• SUSE Security Update SUSE-SU-2021:1989-1 vom 2021-06-17
  https://lists.suse.com/pipermail/sle-security-updates/2021-June/009025.html
• Amazon Linux Security Advisory ALAS-2021-1515 vom 2021-07-13
  https://alas.aws.amazon.com/ALAS-2021-1515.html
• Juniper Security Advisory JSA11206 vom 2021-07-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11206&cat=SIRT_1
• SUSE Security Update SUSE-SU-2021:2797-1 vom 2021-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009315.html
• SUSE Security Update SUSE-SU-2021:2798-1 vom 2021-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2021-August/009324.html
• SUSE Security Update SUSE-SU-2021:3007-1 vom 2021-09-09
  https://lists.suse.com/pipermail/sle-security-updates/2021-September/009422.html
• SUSE Security Update SUSE-SU-2022:0108-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010012.html
• SUSE Security Update SUSE-SU-2022:14876-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010022.html
• SUSE Security Update SUSE-SU-2022:0107-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010011.html
• SUSE Security Update SUSE-SU-2022:14875-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010014.html
• SUSE Security Update SUSE-SU-2022:0166-1 vom 2022-01-24
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010052.html
• Gentoo Linux Security Advisory GLSA-202209-05 vom 2022-09-07
  https://security.gentoo.org/glsa/202209-05
• Red Hat Security Advisory RHSA-2022:6755 vom 2022-09-29
  https://access.redhat.com/errata/RHSA-2022:6755
• Red Hat Security Advisory RHSA-2022:6756 vom 2022-09-29
  https://access.redhat.com/errata/RHSA-2022:6756
• HCL Article KB0100876 vom 2022-10-06
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100876
• IBM Security Bulletin 6827849 vom 2022-10-08
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-txseries-for-multiplatforms-is-vulnerable-to-no-confidentiality-impact-high-integrity-impact-and-no-availability-impact-cve-2021-2163/
• Trellix Knowledge Center
  https://kcm.trellix.com/corporate/index?page=content&id=SB10366
• IBM Security Bulletin 6837645 vom 2022-11-08
  https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-tivoli-monitoring-included-websphere-application-server-and-ibm-http-server-used-by-websphere-application-server-3/
• F5 Security Advisory K71522481 vom 2022-12-07
  https://support.f5.com/csp/article/K71522481
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md