Medium WID-SEC-2023-0524 20 CVEs

Oracle Java SE: Mehrere Schwachstellen

Published Oct 15, 2019 · Updated Jan 21, 2025 · Revision 35 · de-DE

Vendor: amazon Vendor: Avaya Vendor: Debian Vendor: EMC Vendor: Hitachi Vendor: IBM Vendor: McAfee Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Aura Application Enablement Services Product: Aura Communication Manager Product: Aura Session Manager Product: Aura System Manager Product: Command Suite Product: Corretto Product: Data Protection Advisor Product: Enterprise Linux Product: ePolicy Orchestrator Product: FlashSystem Product: Java SE Product: Java SE Embedded Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: SAN Volume Controller Product: Storwize +3 more

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

Product

Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).
Java Standard Edition (SE) Embedded ist die Laufzeitumgebung für die Java-Plattform des US-Unternehmens Oracle Corporation für Embedded Systems.

Vulnerabilities 20

Critical 9.8

CVE-2019-11068

Nokogiri vulnerable to libxslt protection mechanism bypass

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is subsequentl…

nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems

Apr 10, 2019
Unscored —

CVE-2019-2894

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk11 openjdk8 Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2945

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2958

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk11 openjdk8 Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2962

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2964

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2973

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2975

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2977

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are J…

Oracle Java openjdk-lts openjdk-13 Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2978

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2981

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2983

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2987

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java S…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2988

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2989

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2992

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2996

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version…

Oracle Java

Oct 16, 2019
Unscored —

CVE-2019-2999

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are J…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019

Revision history

2025-01-21 #35
Neue Updates aufgenommen
2023-02-28 #34
Neue Updates von IBM aufgenommen
2021-02-21 #33
Neue Updates von EMC aufgenommen
2020-11-11 #32
Neue Updates von Oracle Linux aufgenommen
2020-10-18 #31
Neue Updates von AVAYA aufgenommen
2020-09-29 #30
Neue Updates von Red Hat aufgenommen
2020-06-21 #29
Neue Updates von SUSE aufgenommen
2020-05-21 #28
Neue Updates von Red Hat aufgenommen
2020-05-13 #27
Neue Updates von McAfee aufgenommen
2020-01-09 #26
Neue Updates von SUSE aufgenommen
2020-01-08 #25
Neue Updates von SUSE aufgenommen
2020-01-07 #24
Neue Updates von SUSE und Red Hat aufgenommen
2020-01-06 #23
Neue Updates von EMC aufgenommen
2020-01-02 #22
Neue Updates von SUSE und Red Hat aufgenommen
2020-01-01 #21
Referenz(en) aufgenommen: DLA 2023
2019-12-17 #20
Neue Updates von Ubuntu aufgenommen
2019-12-10 #19
Neue Updates von SUSE aufgenommen
2019-12-09 #18
Neue Updates von Red Hat aufgenommen
2019-12-08 #17
Neue Updates von Red Hat aufgenommen
2019-12-05 #16
Neue Updates von Red Hat aufgenommen
2019-11-27 #15
Neue Updates von SUSE aufgenommen
2019-11-26 #14
DELL URL korrigiert
2019-11-25 #13
Neue Updates von EMC aufgenommen
2019-11-18 #12
Neue Updates von SUSE aufgenommen
2019-11-13 #11
Neue Updates von AVAYA aufgenommen

References

Oracle Critical Patch Update Advisory - October 2019 vom 2019-10-15
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html#AppendixJAVA
Red Hat Security Advisory RHSA-2019:3128 vom 2019-10-16
https://access.redhat.com/errata/RHSA-2019:3128
Red Hat Security Advisory RHSA-2019:3127 vom 2019-10-16
https://access.redhat.com/errata/RHSA-2019:3127
Red Hat Security Advisory RHSA-2019:3134 vom 2019-10-17
https://access.redhat.com/errata/RHSA-2019:3134
Red Hat Security Advisory RHSA-2019:3135 vom 2019-10-17
https://access.redhat.com/errata/RHSA-2019:3135
Red Hat Security Advisory RHSA-2019:3136 vom 2019-10-17
https://access.redhat.com/errata/RHSA-2019:3136
OpenJDK Vulnerability Advisory vom 2019-10-20
https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15
Debian Security Advisory DSA-4546 vom 2019-10-21
http://www.debian.org/security/2019/dsa-4546
Debian Security Advisory DSA-4548 vom 2019-10-21
https://www.debian.org/security/2019/dsa-4548
Red Hat Security Advisory RHSA-2019:3158 vom 2019-10-22
https://access.redhat.com/errata/RHSA-2019:3158
Red Hat Security Advisory RHSA-2019:3157 vom 2019-10-22
https://access.redhat.com/errata/RHSA-2019:3157
CentOS Security Advisory CESA-2019:3158 vom 2019-10-23
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-3158-Moderate-CentOS-6-java-1-7-0-openjdk-Security-Update-tp4645730.html
CentOS Security Advisory CESA-2019:3136 vom 2019-10-23
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-3136-Important-CentOS-6-java-1-8-0-openjdk-Security-Update-tp4645731.html
CentOS Security Advisory CESA-2019:3127 vom 2019-10-23
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-3127-Important-CentOS-7-java-11-openjdk-Security-Update-tp4645733.html
CentOS Security Advisory CESA-2019:3157 vom 2019-10-23
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-3157-Moderate-CentOS-7-java-1-7-0-openjdk-Security-Update-tp4645736.html
CentOS Security Advisory CESA-2019:3128 vom 2019-10-23
http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2019-3128-Important-CentOS-7-java-1-8-0-openjdk-Security-Update-tp4645732.html
Hitachi Security Information
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-123/index.html
AVAYA Security Advisory ASA-2019-230 vom 2019-11-14
https://downloads.avaya.com/css/P8/documents/101062269
AVAYA Security Advisory ASA-2019-229 vom 2019-11-14
https://downloads.avaya.com/css/P8/documents/101062268
SUSE Security Update SUSE-SU-2019:2998-1 vom 2019-11-19
https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1.html
EMC Security Advisory DSA-2019-169 vom 2019-11-26
https://www.dell.com/support/security/de-de/details/DOC-109298/DSA-2019-169-RSA%C2%AE-Authentication-Manager-Security-Update-for-Third-Party-Component-Vulnerabilities
SUSE Security Update SUSE-SU-2019:3084-1 vom 2019-11-27
https://www.suse.com/support/update/announcement/2019/suse-su-20193084-1.html
SUSE Security Update SUSE-SU-2019:3083-1 vom 2019-11-27
https://www.suse.com/support/update/announcement/2019/suse-su-20193083-1.html
Red Hat Security Advisory RHSA-2019:4110 vom 2019-12-05
https://access.redhat.com/errata/RHSA-2019:4110
Red Hat Security Advisory RHSA-2019:4109 vom 2019-12-05
https://access.redhat.com/errata/RHSA-2019:4109
Red Hat Security Advisory RHSA-2019:4113 vom 2019-12-09
https://access.redhat.com/errata/RHSA-2019:4113
Red Hat Security Advisory RHSA-2019:4115 vom 2019-12-09
https://access.redhat.com/errata/RHSA-2019:4115
SUSE Security Update SUSE-SU-2019:3238-1 vom 2019-12-10
https://www.suse.com/support/update/announcement/2019/suse-su-20193238-1.html
Ubuntu Security Notice USN-4223-1 vom 2019-12-18
https://usn.ubuntu.com/4223-1/
SUSE Security Update SUSE-SU-2020:0001-1 vom 2020-01-02
https://www.suse.com/support/update/announcement/2020/suse-su-20200001-1.html
Red Hat Security Advisory RHSA-2020:0006 vom 2020-01-02
https://access.redhat.com/errata/RHSA-2020:0006
EMC Security Advisory 540031 vom 2020-01-07
https://www.dell.com/support/security/de-de/details/540031/DSA-2020-003-Dell-EMC-NetWorker-Runtime-Environment-Security-Update-for-Oracle-JRE-Vulnerabilities
SUSE Security Update SUSE-SU-2020:0025-1 vom 2020-01-07
https://www.suse.com/support/update/announcement/2020/suse-su-20200025-1.html
SUSE Security Update SUSE-SU-2020:0024-1 vom 2020-01-07
https://www.suse.com/support/update/announcement/2020/suse-su-20200024-1.html
Red Hat Security Advisory RHSA-2020:0046 vom 2020-01-07
https://access.redhat.com/errata/RHSA-2020:0046
SUSE Security Update SUSE-SU-2020:14265-1 vom 2020-01-09
https://www.suse.com/support/update/announcement/2020/suse-su-202014265-1.html
SUSE Security Update SUSE-SU-2020:14263-1 vom 2020-01-08
https://www.suse.com/support/update/announcement/2020/suse-su-202014263-1.html
SUSE Security Update SUSE-SU-2020:0051-1 vom 2020-01-09
https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html
McAfee Security Bulletin SB10315 vom 2020-05-14
https://kc.mcafee.com/corporate/index?page=content&id=SB10315
Red Hat Security Advisory RHSA-2020:2241 vom 2020-05-20
https://access.redhat.com/errata/RHSA-2020:2241
Red Hat Security Advisory RHSA-2020:2237 vom 2020-05-20
https://access.redhat.com/errata/RHSA-2020:2237
Red Hat Security Advisory RHSA-2020:2239 vom 2020-05-20
https://access.redhat.com/errata/RHSA-2020:2239
SUSE Security Update SUSE-SU-2020:1685-1 vom 2020-06-19
http://lists.suse.com/pipermail/sle-security-updates/2020-June/006985.html
SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19
http://lists.suse.com/pipermail/sle-security-updates/2020-June/006981.html
Red Hat Security Advisory RHSA-2020:4005 vom 2020-09-29
https://access.redhat.com/errata/RHSA-2020:4005
AVAYA Security Advisory ASA-2020-138 vom 2020-10-18
https://downloads.avaya.com/css/P8/documents/101071521
Oracle Linux Security Advisory ELSA-2020-4464 vom 2020-11-11
https://linux.oracle.com/errata/ELSA-2020-4464.html
EMC Security Advisory DSA-2020-184 vom 2021-02-21
https://www.dell.com/support/kbdoc/de-de/000153742/dsa-2020-184-dell-emc-data-protection-advisor-security-update-for-oracle-jre-october-2019-cpu-vulnerabilities
IBM Security Bulletin 6250887 vom 2023-03-01
https://www.cybersecurity-help.cz/vdb/SB2023030112
Change Log for Amazon Corretto 8 vom 2025-01-21
https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md
Change Log for Amazon Corretto 11 vom 2025-01-21
https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md