Medium 1 exploited CVE WID-SEC-2024-0121 13 CVEs

Oracle Java SE: Mehrere Schwachstellen

Published Jan 16, 2024 · Updated Sep 29, 2025 · Revision 52 · de-DE

Vendor: amazon Vendor: Broadcom Vendor: Debian Vendor: Dell Vendor: EMC Vendor: gentoo Vendor: HCL Software Vendor: Hitachi Vendor: IBM Vendor: KYOCERA Vendor: Oracle Vendor: Red Hat Vendor: SolarWinds Vendor: SUSE Vendor: Ubuntu Product: AIX Product: App Connect Enterprise Product: Avamar Product: BigFix Product: Brocade SANnav Product: Business Automation Workflow Product: Command Suite Product: Configuration Manager Product: Corretto Product: DataPower Gateway Product: Db2 Product: ECS Product: Enterprise Linux Product: FlashSystem Product: GraalVM +37 more

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Product

Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).

Vulnerabilities 13

High 7.5

CVE-2023-44487 Exploited Public exploit EPSS 100%

HTTP/2 Stream Cancellation Attack

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL

Oct 10, 2023
KEV Oct 10, 2023
High 7.5

CVE-2023-5072

DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven

Oct 12, 2023
High 7.5

CVE-2024-20932

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Debian Ubuntu Alpine

Jan 16, 2024
High 7.4

CVE-2024-20918

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
High 7.4

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 5.9

CVE-2024-20919

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 5.9

CVE-2024-20921

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 5.9

CVE-2024-20926

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 4.7

CVE-2024-20945

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Low 3.7

CVE-2024-20955

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

Oracle GraalVM Enterprise Edition openjdk17 Alpine

Jan 16, 2024
Low 3.1

CVE-2024-20923

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

Oracle Java SE JDK and JRE openjdk-7 openjfx Ubuntu Wolfi

Feb 17, 2024
Low 3.1

CVE-2024-20925

Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit v…

Oracle Java SE JDK and JRE openjdk-7 openjfx Ubuntu Wolfi Maven

Feb 17, 2024
Low 2.5

CVE-2024-20922

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

Oracle Java SE JDK and JRE openjdk-7 openjfx Ubuntu Wolfi

Jan 16, 2024

Revision history

2025-09-29 #52
Neue Updates von IBM aufgenommen
2025-04-29 #51
Neue Updates aufgenommen
2025-02-19 #50
Neue Updates von openSUSE aufgenommen
2025-02-18 #49
Neue Updates von openSUSE aufgenommen
2025-02-04 #48
Neue Updates von Ubuntu aufgenommen
2025-01-21 #47
Neue Updates aufgenommen
2025-01-02 #46
Neue Updates von IBM aufgenommen
2024-12-08 #45
Neue Updates von Gentoo aufgenommen
2024-11-10 #44
Neue Updates von Ubuntu aufgenommen
2024-07-18 #43
Neue Updates von Dell aufgenommen
2024-07-15 #42
Neue Updates von HCL aufgenommen
2024-06-23 #41
Neue Updates von IBM aufgenommen
2024-06-19 #40
Neue Updates von IBM aufgenommen
2024-05-23 #39
Neue Updates von BROCADE aufgenommen
2024-05-16 #38
Neue Updates von IBM aufgenommen
2024-05-09 #37
Neue Updates von IBM aufgenommen
2024-05-07 #36
Neue Updates von Dell aufgenommen
2024-05-02 #35
Neue Updates von IBM aufgenommen
2024-05-01 #34
Neue Updates von IBM aufgenommen
2024-04-29 #33
Neue Updates von IBM aufgenommen
2024-04-28 #32
Neue Updates von IBM aufgenommen
2024-04-16 #31
Neue Updates von IBM aufgenommen
2024-04-04 #30
Neue Updates von IBM aufgenommen
2024-04-01 #29
Neue Updates von IBM aufgenommen
2024-03-25 #28
Neue Updates von IBM aufgenommen

References

Oracle Critical Patch Update Advisory - January 2024 - Appendix Oracle Java SE vom 2024-01-16
https://www.oracle.com/security-alerts/cpujan2024.html#AppendixJAVA
Change Log for Amazon Corretto 8
https://github.com/corretto/corretto-8/blob/release-8.402.06.1/CHANGELOG.md
Change Log for Amazon Corretto 11
https://github.com/corretto/corretto-11/blob/release-11.0.22.7.1/CHANGELOG.md
Red Hat Security Advisory RHSA-2024:0233 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0233
Red Hat Security Advisory RHSA-2024:0234 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0234
Red Hat Security Advisory RHSA-2024:0230 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0230
Red Hat Security Advisory RHSA-2024:0244 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0244
Red Hat Security Advisory RHSA-2024:0250 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0250
Red Hat Security Advisory RHSA-2024:0235 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0235
Red Hat Security Advisory RHSA-2024:0237 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0237
Red Hat Security Advisory RHSA-2024:0239 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0239
Red Hat Security Advisory RHSA-2024:0240 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0240
Red Hat Security Advisory RHSA-2024:0241 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0241
Red Hat Security Advisory RHSA-2024:0242 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0242
Red Hat Security Advisory RHSA-2024:0246 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0246
Red Hat Security Advisory RHSA-2024:0247 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0247
Red Hat Security Advisory RHSA-2024:0248 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0248
Red Hat Security Advisory RHSA-2024:0249 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0249
Red Hat Security Advisory RHSA-2024:0265 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0265
Red Hat Security Advisory RHSA-2024:0267 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0267
Amazon Linux Security Advisory ALASCORRETTO8-2024-009 vom 2024-01-18
https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2024-009.html
Red Hat Security Advisory RHSA-2024:0224 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0224
Red Hat Security Advisory RHSA-2024:0222 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0222
Red Hat Security Advisory RHSA-2024:0223 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0223
Red Hat Security Advisory RHSA-2024:0225 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0225
Red Hat Security Advisory RHSA-2024:0226 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0226
Red Hat Security Advisory RHSA-2024:0228 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0228
Red Hat Security Advisory RHSA-2024:0231 vom 2024-01-17
https://access.redhat.com/errata/RHSA-2024:0231
Red Hat Security Advisory RHSA-2024:0232 vom 2024-01-18
https://access.redhat.com/errata/RHSA-2024:0232
Oracle Linux Security Advisory ELSA-2024-0232 vom 2024-01-18
https://linux.oracle.com/errata/ELSA-2024-0232.html
Oracle Linux Security Advisory ELSA-2024-0223 vom 2024-01-18
https://linux.oracle.com/errata/ELSA-2024-0223.html
Amazon Linux Security Advisory ALAS-2024-2415 vom 2024-01-19
https://alas.aws.amazon.com/AL2/ALAS-2024-2415.html
Red Hat Security Advisory RHSA-2024:0266 vom 2024-01-19
https://access.redhat.com/errata/RHSA-2024:0266
Amazon Linux Security Advisory ALAS-2024-2414 vom 2024-01-19
https://alas.aws.amazon.com/AL2/ALAS-2024-2414.html
Change Log for Amazon Corretto 8 vom 2024-01-19
https://github.com/corretto/corretto-8/blob/release-8.402.08.1/CHANGELOG.md
Oracle Linux Security Advisory ELSA-2024-0249 vom 2024-01-20
https://linux.oracle.com/errata/ELSA-2024-0249.html
Oracle Linux Security Advisory ELSA-2024-0248 vom 2024-01-20
https://linux.oracle.com/errata/ELSA-2024-0248.html
Oracle Linux Security Advisory ELSA-2024-0267 vom 2024-01-23
https://linux.oracle.com/errata/ELSA-2024-0267.html
Debian Security Advisory DSA-5604 vom 2024-01-23
https://lists.debian.org/debian-security-announce/2024/msg00011.html
Oracle Linux Security Advisory ELSA-2024-0266 vom 2024-01-23
https://linux.oracle.com/errata/ELSA-2024-0266.html
Amazon Linux Security Advisory ALASCORRETTO8-2024-010 vom 2024-01-24
https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2024-010.html
SUSE Security Update SUSE-SU-2024:0203-1 vom 2024-01-24
https://lists.suse.com/pipermail/sle-security-updates/2024-January/017755.html
Oracle Linux Security Advisory ELSA-2024-0265 vom 2024-01-25
http://linux.oracle.com/errata/ELSA-2024-0265.html
CentOS Security Advisory CESA-2024:0223 vom 2024-01-26
https://lists.centos.org/pipermail/centos-announce/2024-January/099218.html
CentOS Security Advisory CESA-2024:0232 vom 2024-01-26
https://lists.centos.org/pipermail/centos-announce/2024-January/099219.html
Debian Security Advisory DLA-3728 vom 2024-01-31
https://lists.debian.org/debian-lts-announce/2024/01/msg00023.html
Debian Security Advisory DSA-5613 vom 2024-02-02
https://lists.debian.org/debian-security-announce/2024/msg00020.html
SUSE Security Update SUSE-SU-2024:0321-1 vom 2024-02-02
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017851.html
Hitachi Vulnerability Information HITACHI-SEC-2024-110 vom 2024-02-06
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-110/index.html
SUSE Security Update SUSE-SU-2024:0325-1 vom 2024-02-05
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017858.html
Amazon Linux Security Advisory ALAS-2024-2438 vom 2024-02-06
https://alas.aws.amazon.com/AL2/ALAS-2024-2438.html
Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2024-007 vom 2024-02-06
https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2024-007.html
IBM Security Bulletin 7116432 vom 2024-02-09
https://www.ibm.com/support/pages/node/7116432
IBM Security Bulletin 7117872 vom 2024-02-15
https://www.ibm.com/support/pages/node/7117872
SUSE Security Update SUSE-SU-2024:0479-1 vom 2024-02-15
https://lists.suse.com/pipermail/sle-security-updates/2024-February/017941.html
Ubuntu Security Notice USN-6661-1 vom 2024-02-27
https://ubuntu.com/security/notices/USN-6661-1
SUSE Security Update SUSE-SU-2024:0619-1 vom 2024-02-26
https://lists.suse.com/pipermail/sle-security-updates/2024-February/018007.html
IBM Security Bulletin 7123938 vom 2024-02-26
https://www.ibm.com/support/pages/node/7123938
Ubuntu Security Notice USN-6662-1 vom 2024-02-27
https://ubuntu.com/security/notices/USN-6662-1
Ubuntu Security Notice USN-6660-1 vom 2024-02-27
https://ubuntu.com/security/notices/USN-6660-1
IBM Security Bulletin 7124105 vom 2024-02-27
https://www.ibm.com/support/pages/node/7124105
IBM Security Bulletin 7129821 vom 2024-03-04
https://www.ibm.com/support/pages/node/7129821
IBM Security Bulletin 7130904 vom 2024-03-08
https://www.ibm.com/support/pages/node/7130904
SUSE Security Update SUSE-SU-2024:0804-1 vom 2024-03-07
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018109.html
IBM Security Bulletin 7130999 vom 2024-03-08
https://www.ibm.com/support/pages/node/7130999
IBM Security Bulletin 7134446 vom 2024-03-11
https://www.ibm.com/support/pages/node/7134446
IBM Security Bulletin 7131057 vom 2024-03-08
https://www.ibm.com/support/pages/node/7131057
Dell Security Advisory DSA-2024-126 vom 2024-03-12
https://www.dell.com/support/kbdoc/000222962/dsa-2023-=
IBM Security Bulletin 7131804 vom 2024-03-11
https://www.ibm.com/support/pages/node/7131804
SUSE Security Update SUSE-SU-2024:0847-1 vom 2024-03-12
https://lists.suse.com/pipermail/sle-security-updates/2024-March/018149.html
IBM Security Bulletin 7140420 vom 2024-03-13
https://www.ibm.com/support/pages/node/7140420
Dell Security Advisory DSA-2023-126 vom 2024-03-13
https://www.dell.com/support/kbdoc/de-de/000222962/dsa-2023-126-security-update-for-dell-networker-runtime-environment-nre-oracle-java-se-vulnerabilities
Ubuntu Security Notice USN-6696-1 vom 2024-03-18
https://ubuntu.com/security/notices/USN-6696-1
Oracle Linux Security Advisory ELSA-2024-12225 vom 2024-03-19
https://linux.oracle.com/errata/ELSA-2024-12225.html
IBM Security Bulletin 7144952 vom 2024-03-21
https://www.ibm.com/support/pages/node/7144952
IBM Security Bulletin
https://www.ibm.com/support/pages/node/7145213
IBM Security Bulletin 7145183 vom 2024-03-25
https://www.ibm.com/support/pages/node/7145183
IBM Security Bulletin
https://www.ibm.com/support/pages/node/7145161
IBM Security Bulletin 7145672 vom 2024-04-02
https://www.ibm.com/support/pages/node/7145672
IBM Security Bulletin 7146478 vom 2024-04-04
https://www.ibm.com/support/pages/node/7146478