Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 15

• High 8.3
  CVE-2020-2803

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• High 8.3
  CVE-2020-2805

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• High 7.5
  CVE-2019-18197

  Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

  In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written …

  nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems
  Oct 18, 2019
• High 7.5
  CVE-2020-2816

  Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Medium 5.3
  CVE-2020-2781

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Medium 5.3
  CVE-2020-2830

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Medium 4.8
  CVE-2020-2767

  Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Medium 4.8
  CVE-2020-2800

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supporte…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2754

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2755

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2756

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2757

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2764

  Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console). The supported version …

  Oracle Java
  Apr 15, 2020
• Low 3.7
  CVE-2020-2773

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 15, 2020
• Low 3.7
  CVE-2020-2778

  Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine Wolfi
  Apr 15, 2020

Revision history

1. 2025-04-29 #33

   Neue Updates von Amazon aufgenommen

2. 2025-01-21 #32

   Neue Updates aufgenommen

3. 2023-08-23 #31

   Neue Updates von Amazon aufgenommen

4. 2023-08-17 #30

   Neue Updates von F5 aufgenommen

5. 2023-07-24 #29

   Neue Updates von F5 aufgenommen

6. 2023-02-28 #28

   Neue Updates von IBM aufgenommen

7. 2022-10-06 #27

   Neue Updates von F5 aufgenommen

8. 2021-03-04 #26

   Neue Updates von Red Hat aufgenommen

9. 2021-03-03 #25

   Neue Updates von Red Hat aufgenommen

10. 2020-11-11 #24

    Neue Updates von Oracle Linux aufgenommen

11. 2020-11-03 #23

    Neue Updates von Red Hat aufgenommen

12. 2020-11-02 #22

    Neue Updates von HCL aufgenommen

13. 2020-10-18 #21

    Neue Updates von AVAYA aufgenommen

14. 2020-09-29 #20

    Neue Updates von Red Hat aufgenommen

15. 2020-07-19 #19

    Neue Updates von AVAYA aufgenommen

16. 2020-07-14 #18

    Neue Updates von SUSE aufgenommen

17. 2020-07-07 #17

    Neue Updates von SUSE aufgenommen

18. 2020-06-21 #16

    Neue Updates von SUSE aufgenommen

19. 2020-06-17 #15

    Neue Updates von SUSE und EMC aufgenommen

20. 2020-06-16 #14

    Neue Updates von SUSE aufgenommen

21. 2020-06-09 #13

    Neue Updates von SUSE aufgenommen

22. 2020-05-21 #12

    Neue Updates von Red Hat und AVAYA aufgenommen

23. 2020-05-14 #11

    Neue Updates von HITACHI aufgenommen

24. 2020-05-04 #10

    Neue Updates von Fedora aufgenommen

25. 2020-05-03 #9

    Neue Updates von CentOS und Red Hat aufgenommen

References

• Oracle Critical Patch Update Advisory - April 2020 vom 2020-04-14
  https://www.oracle.com/security-alerts/cpuapr2020.html#AppendixJAVA
• Red Hat Security Advisory RHSA-2020:1508 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1508
• Red Hat Security Advisory RHSA-2020:1506 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1506
• Red Hat Security Advisory RHSA-2020:1507 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1507
• Red Hat Security Advisory RHSA-2020:1509 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1509
• Red Hat Security Advisory RHSA-2020:1512 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1512
• Red Hat Security Advisory RHSA-2020:1514 vom 2020-04-21
  https://access.redhat.com/errata/RHSA-2020:1514
• Red Hat Security Advisory RHSA-2020:1515 vom 2020-04-22
  https://access.redhat.com/errata/RHSA-2020:1515
• Red Hat Security Advisory RHSA-2020:1516 vom 2020-04-22
  https://access.redhat.com/errata/RHSA-2020:1516
• Red Hat Security Advisory RHSA-2020:1517 vom 2020-04-22
  https://access.redhat.com/errata/RHSA-2020:1517
• Ubuntu Security Notice USN-4337-1 vom 2020-04-22
  https://usn.ubuntu.com/4337-1/
• Debian Security Advisory DSA-4662 vom 2020-04-25
  https://www.debian.org/security/2020/dsa-4662
• CentOS Security Advisory CESA-2020:1506 vom 2020-04-28
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-1506-Important-CentOS-6-java-1-8-0-openjdk-Security-Update-tp4645904.html
• CentOS Security Advisory CESA-2020:1508 vom 2020-04-28
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-1508-Important-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645903.html
• Debian Security Advisory DLA 2193 vom 2020-04-29
  https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202004/msg00024.html
• Debian Security Advisory DSA-4668 vom 2020-04-30
  https://www.debian.org/security/2020/dsa-4668
• AVAYA Security Advisory ASA-2020-068 vom 2020-04-30
  https://downloads.avaya.com/css/P8/documents/101066223
• CentOS Security Advisory CESA-2020:1509 vom 2020-04-30
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-1509-Important-CentOS-7-java-11-openjdk-Security-Update-tp4645907.html
• CentOS Security Advisory CESA-2020:1507 vom 2020-04-30
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-1507-Important-CentOS-7-java-1-7-0-openjdk-Security-Update-tp4645909.html
• CentOS Security Advisory CESA-2020:1512 vom 2020-04-30
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-1512-Important-CentOS-7-java-1-8-0-openjdk-Security-Update-tp4645908.html
• Red Hat Security Advisory RHSA-2020:1938 vom 2020-05-04
  https://access.redhat.com/errata/RHSA-2020:1938
• Red Hat Security Advisory RHSA-2020:1942 vom 2020-05-04
  https://access.redhat.com/errata/RHSA-2020:1942
• Fedora Security Advisory FEDORA-2020-5386FE3BBB vom 2020-05-05
  https://bodhi.fedoraproject.org/updates/FEDORA-2020-5386fe3bbb
• Hitachi Vulnerability Information HITACHI-SEC-2020-111 vom 2020-05-15
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-111/index.html
• Red Hat Security Advisory RHSA-2020:2239 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2239
• Red Hat Security Advisory RHSA-2020:2236 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2236
• Red Hat Security Advisory RHSA-2020:2237 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2237
• AVAYA Security Advisory ASA-2020-066 vom 2020-05-22
  https://downloads.avaya.com/css/P8/documents/101066704
• Red Hat Security Advisory RHSA-2020:2241 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2241
• Red Hat Security Advisory RHSA-2020:2238 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2238
• SUSE Security Update SUSE-SU-2020:1572-1 vom 2020-06-09
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006907.html
• SUSE Security Update SUSE-SU-2020:14391-1 vom 2020-06-10
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html
• SUSE Security Update SUSE-SU-2020:1569-1 vom 2020-06-09
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006904.html
• SUSE Security Update SUSE-SU-2020:1571-1 vom 2020-06-09
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006906.html
• SUSE Security Update SUSE-SU-2020:1409-1 vom 2020-06-16
  https://www.suse.com/support/update/announcement/2020/suse-su-20201409-1.html
• SUSE Security Update SUSE-SU-2020:1511-1 vom 2020-06-16
  https://www.suse.com/support/update/announcement/2020/suse-su-20201511-1.html
• SUSE Security Update SUSE-SU-2020:14398-1 vom 2020-06-17
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html
• EMC Security Advisory DSA-2020-151 vom 2020-06-18
  https://www.dell.com/support/security/de-de/details/544561/DSA-2020-151-Dell-EMC-NetWorker-Runtime-Environment-NRE-Security-Update-for-Java-SE-Embedded-Vu
• SUSE Security Update SUSE-SU-2020:1686-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006987.html
• SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html
• SUSE Security Update SUSE-SU-2020:1685-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html
• SUSE Security Update SUSE-SU-2020:1683-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html
• SUSE Security Update SUSE-SU-2020:1511-2 vom 2020-07-07
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007085.html
• SUSE Security Update SUSE-SU-2020:1569-2 vom 2020-07-14
  http://lists.suse.com/pipermail/sle-security-updates/2020-July/007125.html
• AVAYA Security Advisory ASA-2020-071 vom 2020-07-18
  https://downloads.avaya.com/css/P8/documents/101069460
• AVAYA Security Advisory ASA-2020-070 vom 2020-07-18
  https://downloads.avaya.com/css/P8/documents/101069455
• Red Hat Security Advisory RHSA-2020:4005 vom 2020-09-29
  https://access.redhat.com/errata/RHSA-2020:4005
• AVAYA Security Advisory ASA-2020-138 vom 2020-10-18
  https://downloads.avaya.com/css/P8/documents/101071521
• HCL Article KB0084794 vom 2020-11-02
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084794
• Red Hat Security Advisory RHSA-2020:4464 vom 2020-11-04
  https://access.redhat.com/errata/RHSA-2020:4464
• Oracle Linux Security Advisory ELSA-2020-4464 vom 2020-11-11
  https://linux.oracle.com/errata/ELSA-2020-4464.html
• Red Hat Security Advisory RHSA-2021:0717 vom 2021-03-03
  https://access.redhat.com/errata/RHSA-2021:0717
• Red Hat Security Advisory RHSA-2021:0736 vom 2021-03-04
  https://access.redhat.com/errata/RHSA-2021:0736
• F5 Security Advisory K10812540 vom 2022-10-06
  https://support.f5.com/csp/article/K10812540
• IBM Security Bulletin 6445063 vom 2023-02-28
  https://www.cybersecurity-help.cz/vdb/SB2023022828
• F5 Security Advisory K000135555 vom 2023-07-24
  https://my.f5.com/manage/s/article/K000135555
• F5 Security Advisory K10812540 vom 2023-08-17
  https://my.f5.com/manage/s/article/K10812540
• Amazon Linux Security Advisory ALAS-2023-1809 vom 2023-08-23
  https://alas.aws.amazon.com/ALAS-2023-1809.html
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2025-012 vom 2025-04-29
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2025-012.html
• Amazon Linux Security Advisory ALASCORRETTO8-2025-018 vom 2025-04-29
  https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2025-018.html