Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 12

• High 8.1
  CVE-2020-2604

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 6.8
  CVE-2020-2601

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 6.5
  CVE-2019-16168

  In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missi…

  sqlite3 sqlite3 ceph sqlite Debian Ubuntu Azure Linux Alpine
  Sep 9, 2019
• Medium 5.9
  CVE-2020-2585

  Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is J…

  Oracle Java openjfx openjfx Debian Ubuntu
  Jan 15, 2020
• Medium 5.3
  CVE-2019-13117

  Uninitialized read in Nokogiri gem

  In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to discern whether a byte on the stack contains the characters A, a, I, i, or 0, or any…

  nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems
  Jul 1, 2019
• Medium 5.3
  CVE-2019-13118

  libxslt Type Confusion vulnerability that affects Nokogiri

  In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

  nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems
  Jul 1, 2019
• Medium 4.8
  CVE-2020-2593

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Medium 4.8
  CVE-2020-2655 Public exploit

  Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java…

  Oracle Java openjdk-lts openjdk11 Debian Ubuntu Alpine
  Jan 15, 2020
• Low 3.7
  CVE-2020-2583

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.7
  CVE-2020-2590

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.7
  CVE-2020-2654

  Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• Low 3.7
  CVE-2020-2659

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

  Oracle Java openjdk-8 openjdk8 Ubuntu Alpine
  Jan 15, 2020

Revision history

1. 2025-01-21 #42

   Neue Updates aufgenommen

2. 2023-10-03 #41

   Neue Updates von IBM aufgenommen

3. 2023-01-31 #40

   Neue Updates von IBM aufgenommen

4. 2021-08-11 #39

   Neue Updates von HCL aufgenommen

5. 2021-02-24 #38

   Neue Updates von Red Hat aufgenommen

6. 2021-01-25 #37

   Neue Updates von Gentoo aufgenommen

7. 2021-01-14 #36

   Neue Updates von Juniper aufgenommen

8. 2020-12-16 #35

   Neue Updates von Red Hat aufgenommen

9. 2020-10-14 #34

   Neue Updates von HCL aufgenommen

10. 2020-08-10 #33

    Neue Updates von Red Hat aufgenommen

11. 2020-06-21 #32

    Neue Updates von SUSE aufgenommen

12. 2020-06-17 #31

    Neue Updates von SUSE aufgenommen

13. 2020-06-16 #30

    Neue Updates von SUSE aufgenommen

14. 2020-06-09 #29

    Neue Updates von SUSE aufgenommen

15. 2020-05-21 #28

    Neue Updates von Red Hat aufgenommen

16. 2020-05-13 #27

    Neue Updates von McAfee aufgenommen

17. 2020-03-22 #26

    Neue Updates von AVAYA aufgenommen

18. 2020-03-17 #25

    Neue Updates von Red Hat aufgenommen

19. 2020-03-16 #24

    Aufnahme betroffener Produkte von Avaya

20. 2020-03-15 #23

    Neue Updates von AVAYA aufgenommen

21. 2020-03-10 #22

    Neue Updates von SUSE aufgenommen

22. 2020-03-02 #21

    Neue Updates von Debian aufgenommen

23. 2020-03-01 #20

    Neue Updates von SUSE aufgenommen

24. 2020-02-27 #19

    Neue Updates von Red Hat aufgenommen

25. 2020-02-25 #18

    Neue Updates von SUSE aufgenommen

References

• Oracle Critical Patch Update Advisory - January 2020 vom 2020-01-14
  https://www.oracle.com/security-alerts/cpujan2020.html#AppendixJAVA
• Red Hat Security Advisory RHSA-2020:0122 vom 2020-01-16
  https://access.redhat.com/errata/RHSA-2020:0122
• Red Hat Security Advisory RHSA-2020:0128 vom 2020-01-16
  https://access.redhat.com/errata/RHSA-2020:0128
• CentOS Security Advisory CESA-2020:0122 vom 2020-01-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0122-Important-CentOS-7-java-11-openjdk-Security-Update-tp4645807.html
• CentOS Security Advisory CESA-2020:0122 vom 2020-01-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0122-Important-CentOS-6-java-11-openjdk-Security-Update-tp4645806.html
• Debian Security Advisory DSA-4605 vom 2020-01-19
  https://www.debian.org/security/2020/dsa-4605
• SUSE Security Update SUSE-SU-2020:0140-1 vom 2020-01-21
  https://www.suse.com/support/update/announcement/2020/suse-su-20200140-1.html
• Red Hat Security Advisory RHSA-2020:0157 vom 2020-01-21
  https://access.redhat.com/errata/RHSA-2020:0157
• Red Hat Security Advisory RHSA-2020:0196 vom 2020-01-22
  https://access.redhat.com/errata/RHSA-2020:0196
• Red Hat Security Advisory RHSA-2020:0202 vom 2020-01-22
  https://access.redhat.com/errata/RHSA-2020:0202
• SUSE Security Update SUSE-SU-2020:0213-1 vom 2020-01-23
  https://www.suse.com/support/update/announcement/2020/suse-su-20200213-1.html
• SUSE Security Update SUSE-SU-2020:0231-1 vom 2020-01-25
  https://www.suse.com/support/update/announcement/2020/suse-su-20200231-1.html
• Red Hat Security Advisory RHSA-2020:0231 vom 2020-01-28
  https://access.redhat.com/errata/RHSA-2020:0231
• Red Hat Security Advisory RHSA-2020:0232 vom 2020-01-28
  https://access.redhat.com/errata/RHSA-2020:0232
• CentOS Security Advisory CESA-2020:0157 vom 2020-01-28
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0157-Important-CentOS-6-java-1-8-0-openjdk-Security-Update-tp4645809.html
• Ubuntu Security Notice USN-4257-1 vom 2020-01-28
  https://usn.ubuntu.com/4257-1/
• CentOS Security Advisory CESA-2020:0196 vom 2020-01-28
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0196-Important-CentOS-7-java-1-8-0-openjdk-Security-Update-tp4645819.html
• SUSE Security Update SUSE-SU-2020:0261-1 vom 2020-01-30
  https://www.suse.com/support/update/announcement/2020/suse-su-20200261-1.html
• Hitachi Vulnerability Information HITACHI-SEC-2020-103 vom 2020-01-31
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2020-103/index.html
• Red Hat Security Advisory RHSA-2020:0465 vom 2020-02-11
  http://www.auscert.org.au/bulletins/ESB-2020.0477/
• Red Hat Security Advisory RHSA-2020:0467 vom 2020-02-11
  https://access.redhat.com/errata/RHSA-2020:0467
• Red Hat Security Advisory RHSA-2020:0468 vom 2020-02-11
  https://access.redhat.com/errata/RHSA-2020:0468
• Red Hat Security Advisory RHSA-2020:0470 vom 2020-02-11
  https://access.redhat.com/errata/RHSA-2020:0470
• Red Hat Security Advisory RHSA-2020:0469 vom 2020-02-11
  https://access.redhat.com/errata/RHSA-2020:0469
• Debian Security Advisory DSA-4621 vom 2020-02-13
  https://www.debian.org/security/2020/dsa-4621
• Red Hat Security Advisory RHSA-2020:0541 vom 2020-02-18
  https://access.redhat.com/errata/RHSA-2020:0541
• CentOS Security Advisory CESA-2020:0541 vom 2020-02-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-0541-Important-CentOS-7-java-1-7-0-openjdk-Security-Update-tp4645844.html
• SUSE Security Update SUSE-SU-2020:14287-1 vom 2020-02-21
  https://www.suse.com/support/update/announcement/2020/suse-su-202014287-1.html
• SUSE Security Update SUSE-SU-2020:0466-1 vom 2020-02-25
  https://www.suse.com/support/update/announcement/2020/suse-su-20200466-1.html
• SUSE Security Update SUSE-SU-2020:0456-1 vom 2020-02-25
  https://www.suse.com/support/update/announcement/2020/suse-su-20200456-1.html
• Red Hat Security Advisory RHSA-2020:0632 vom 2020-02-27
  https://access.redhat.com/errata/RHSA-2020:0632
• SUSE Security Update SUSE-SU-2020:0528-1 vom 2020-02-28
  https://www.suse.com/support/update/announcement/2020/suse-su-20200528-1.html
• Debian Security Advisory DLA 2128 vom 2020-03-02
  https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202002/msg00034.html
• SUSE Security Update SUSE-SU-2020:0628-1 vom 2020-03-10
  https://www.suse.com/support/update/announcement/2020/suse-su-20200628-1.html
• AVAYA Security Advisory ASA-2020-014 vom 2020-03-14
  https://downloads.avaya.com/css/P8/documents/101064704
• AVAYA Security Advisory ASA-2020-012 vom 2020-03-14
  https://downloads.avaya.com/css/P8/documents/101064705
• Red Hat Security Advisory RHSA-2020:0856 vom 2020-03-17
  https://access.redhat.com/errata/RHSA-2020:0856
• AVAYA Security Advisory ASA-2020-015 vom 2020-03-22
  https://downloads.avaya.com/css/P8/documents/101064886
• McAfee Security Bulletin SB10315 vom 2020-05-14
  https://kc.mcafee.com/corporate/index?page=content&id=SB10315
• Red Hat Security Advisory RHSA-2020:2239 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2239
• Red Hat Security Advisory RHSA-2020:2241 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2241
• Red Hat Security Advisory RHSA-2020:2236 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2236
• Red Hat Security Advisory RHSA-2020:2238 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2238
• Red Hat Security Advisory RHSA-2020:2237 vom 2020-05-20
  https://access.redhat.com/errata/RHSA-2020:2237
• SUSE Security Update SUSE-SU-2020:14391-1 vom 2020-06-10
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006911.html
• SUSE Security Update SUSE-SU-2020:1409-1 vom 2020-06-16
  https://www.suse.com/support/update/announcement/2020/suse-su-20201409-1.html
• SUSE Security Update SUSE-SU-2020:14398-1 vom 2020-06-17
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006965.html
• SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html
• SUSE Security Update SUSE-SU-2020:1685-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html
• SUSE Security Update SUSE-SU-2020:1683-1 vom 2020-06-19
  http://lists.suse.com/pipermail/sle-security-updates/2020-June/006984.html
• Red Hat Security Advisory RHSA-2020:3387 vom 2020-08-10
  https://access.redhat.com/errata/RHSA-2020:3387
• Red Hat Security Advisory RHSA-2020:3386 vom 2020-08-10
  https://access.redhat.com/errata/RHSA-2020:3386
• Red Hat Security Advisory RHSA-2020:3388 vom 2020-08-10
  https://access.redhat.com/errata/RHSA-2020:3388
• HCL Article KB0084265 vom 2020-10-14
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084265
• Red Hat Security Advisory RHSA-2020:5585 vom 2020-12-16
  https://access.redhat.com/errata/RHSA-2020:5585
• Juniper Security Bulletin
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11110
• Gentoo Linux Security Advisory GLSA-202101-19 vom 2021-01-25
  https://security.gentoo.org/glsa/202101-19
• Red Hat Security Advisory RHSA-2020:5635 vom 2021-02-24
  https://access.redhat.com/errata/RHSA-2020:5635
• HCL Article KB0092293 vom 2021-08-12
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0092293
• IBM Security Bulletin 6855597 vom 2023-01-31
  https://www.ibm.com/support/pages/node/6855597
• IBM Security Bulletin 7035371 vom 2023-10-03
  https://www.ibm.com/support/pages/node/7035371
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md