Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 13

• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.5
  CVE-2024-21892

  On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pr…

  Node.js node openjdk17 nodejs Debian Azure Linux Alpine Wolfi
  Feb 20, 2024
• Low 3.7
  CVE-2024-20954

  Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

  Oracle GraalVM openjdk17 openjdk21 Alpine
  Apr 16, 2024
• Low 3.7
  CVE-2024-21011

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 16, 2024
• Low 3.7
  CVE-2024-21012

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi
  Apr 16, 2024
• Low 3.7
  CVE-2024-21068

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 16, 2024
• Low 3.7
  CVE-2024-21085

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrenc…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 16, 2024
• Low 3.7
  CVE-2024-21094

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 16, 2024
• Low 3.7
  CVE-2024-21098

  Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

  Oracle GraalVM openjdk-9 openjdk-13 Ubuntu Alpine
  Apr 16, 2024
• Low 3.1
  CVE-2024-21003

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

  Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Ubuntu Wolfi
  Apr 16, 2024
• Low 3.1
  CVE-2024-21005

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

  Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Ubuntu Wolfi
  Apr 16, 2024
• Low 2.5
  CVE-2024-21002

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

  Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Ubuntu Wolfi
  Apr 16, 2024
• Low 2.5
  CVE-2024-21004

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). S…

  Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Ubuntu Wolfi
  Apr 16, 2024

Revision history

1. 2025-06-10 #50

   Neue Updates von NetApp aufgenommen

2. 2025-02-19 #49

   Neue Updates von openSUSE aufgenommen

3. 2025-02-18 #48

   Neue Updates von openSUSE aufgenommen

4. 2025-02-06 #47

   Neue Updates von Red Hat aufgenommen

5. 2025-02-04 #46

   Neue Updates von Ubuntu aufgenommen

6. 2025-01-21 #45

   Neue Updates aufgenommen

7. 2025-01-07 #44

   Neue Updates von IBM aufgenommen

8. 2025-01-02 #43

   Neue Updates von IBM aufgenommen

9. 2024-11-28 #42

   Korrektur Produkteintragungen

10. 2024-11-21 #41

    Neue Updates von XEROX aufgenommen

11. 2024-11-10 #40

    Neue Updates von Ubuntu aufgenommen

12. 2024-10-28 #39

    Neue Updates von IBM aufgenommen

13. 2024-10-21 #38

    Neue Updates von IBM aufgenommen

14. 2024-10-13 #37

    Neue Updates von IBM aufgenommen

15. 2024-10-08 #36

    Neue Updates von IBM und IBM-APAR aufgenommen

16. 2024-09-10 #35

    Neue Updates von IBM aufgenommen

17. 2024-09-05 #34

    Neue Updates von IBM aufgenommen

18. 2024-08-20 #33

    Neue Updates von SUSE aufgenommen

19. 2024-08-19 #32

    Neue Updates von SUSE aufgenommen

20. 2024-08-05 #31

    Neue Updates von Dell aufgenommen

21. 2024-07-31 #30

    Neue Updates von IBM aufgenommen

22. 2024-07-29 #29

    Update von Broadcom

23. 2024-07-28 #28

    Neue Updates von BROCADE aufgenommen

24. 2024-07-18 #27

    Neue Updates von Dell und Red Hat aufgenommen

25. 2024-07-07 #26

    Neue Updates von IBM aufgenommen

References

• Oracle Critical Patch Update Advisory - April 2024 - Appendix Oracle Java SE vom 2024-04-16
  https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixJAVA
• Red Hat Security Advisory RHSA-2024:1817 vom 2024-04-16
  https://access.redhat.com/errata/RHSA-2024:1817
• Change Log for Amazon Corretto 8
  https://github.com/corretto/corretto-8/blob/release-8.412.08.1/CHANGELOG.md
• Azul Zulu Quarterly Update Release Notes
  https://docs.azul.com/core/pdfs/april-2024/azul-zulu-ca-release-notes-april-2024-rev1.1.pdf
• Oracle Linux Security Advisory ELSA-2024-1817 vom 2024-04-17
  https://linux.oracle.com/errata/ELSA-2024-1817.html
• Red Hat Security Advisory RHSA-2024:1815 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1815
• Red Hat Security Advisory RHSA-2024:1820 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1820
• Red Hat Security Advisory RHSA-2024:1816 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1816
• Red Hat Security Advisory RHSA-2024:1823 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1823
• Red Hat Security Advisory RHSA-2024:1824 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1824
• Red Hat Security Advisory RHSA-2024:1825 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1825
• Red Hat Security Advisory RHSA-2024:1827 vom 2024-04-17
  https://access.redhat.com/errata/RHSA-2024:1827
• Red Hat Security Advisory RHSA-2024:1818 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1818
• Red Hat Security Advisory RHSA-2024:1828 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1828
• Red Hat Security Advisory RHSA-2024:1819 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1819
• Red Hat Security Advisory RHSA-2024:1826 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1826
• Oracle Linux Security Advisory ELSA-2024-1825 vom 2024-04-20
  https://linux.oracle.com/errata/ELSA-2024-1825.html
• Debian Security Advisory DSA-5671 vom 2024-04-22
  https://lists.debian.org/debian-security-announce/2024/msg00080.html
• Oracle Linux Security Advisory ELSA-2024-1821 vom 2024-04-22
  https://linux.oracle.com/errata/ELSA-2024-1821.html
• Debian Security Advisory DLA-3793 vom 2024-04-22
  https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html
• Debian Security Advisory DSA-5672 vom 2024-04-22
  https://lists.debian.org/debian-security-announce/2024/msg00081.html
• Red Hat Security Advisory RHSA-2024:1821 vom 2024-04-22
  https://access.redhat.com/errata/RHSA-2024:1821
• Red Hat Security Advisory RHSA-2024:1822 vom 2024-04-22
  https://access.redhat.com/errata/RHSA-2024:1822
• Oracle Linux Security Advisory ELSA-2024-1828 vom 2024-04-24
  https://linux.oracle.com/errata/ELSA-2024-1828.html
• Oracle Linux Security Advisory ELSA-2024-1818 vom 2024-04-23
  https://linux.oracle.com/errata/ELSA-2024-1818.html
• Oracle Linux Security Advisory ELSA-2024-1822 vom 2024-04-23
  https://linux.oracle.com/errata/ELSA-2024-1822.html
• SUSE Security Update SUSE-SU-2024:1450-1 vom 2024-04-26
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018435.html
• SUSE Security Update SUSE-SU-2024:1451-1 vom 2024-04-26
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018434.html
• SUSE Security Update SUSE-SU-2024:1452-1 vom 2024-04-26
  https://lists.suse.com/pipermail/sle-security-updates/2024-April/018433.html
• Amazon Linux Security Advisory ALASCORRETTO8-2024-011 vom 2024-04-29
  https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2024-011.html
• Amazon Linux Security Advisory ALAS-2024-2528 vom 2024-04-29
  https://alas.aws.amazon.com/AL2/ALAS-2024-2528.html
• Amazon Linux Security Advisory ALAS-2024-2527 vom 2024-04-29
  https://alas.aws.amazon.com/AL2/ALAS-2024-2527.html
• SUSE Security Update SUSE-SU-2024:1499-1 vom 2024-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018448.html
• SUSE Security Update SUSE-SU-2024:1498-1 vom 2024-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018449.html
• Rocky Linux Security Advisory RLSA-2024:1818 vom 2024-05-06
  https://errata.build.resf.org/RLSA-2024:1818
• Rocky Linux Security Advisory RLSA-2024:1822 vom 2024-05-06
  https://errata.build.resf.org/RLSA-2024:1822
• Rocky Linux Security Advisory RLSA-2024:1828 vom 2024-05-06
  https://errata.build.resf.org/RLSA-2024:1828
• IBM Security Bulletin 7150727 vom 2024-05-09
  https://www.ibm.com/support/pages/node/7150727
• IBM Security Bulletin 7151118 vom 2024-05-13
  https://www.ibm.com/support/pages/node/7151118
• Amazon Linux Security Advisory ALAS-2024-2540 vom 2024-05-15
  https://alas.aws.amazon.com/AL2/ALAS-2024-2540.html
• Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2024-008 vom 2024-05-20
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2024-008.html
• Dell Security Advisory DSA-2024-224 vom 2024-05-20
  https://www.dell.com/support/kbdoc/de-de/000225215/dsa-2024-224-security-update-for-dell-networker-runtime-environment-nre-vulnerabilities
• IBM Security Bulletin 7154506 vom 2024-05-21
  https://www.ibm.com/support/pages/node/7154506
• IBM Security Bulletin 7154537 vom 2024-05-21
  https://www.ibm.com/support/pages/node/7154537
• SUSE Security Update SUSE-SU-2024:1793-1 vom 2024-05-27
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018606.html
• Hitachi Vulnerability Information HITACHI-SEC-2024-125 vom 2024-05-28
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-125/index.html
• IBM Security Bulletin 7155037 vom 2024-05-28
  https://www.ibm.com/support/pages/node/7155037
• SUSE Security Update SUSE-SU-2024:1845-1 vom 2024-05-29
  https://lists.suse.com/pipermail/sle-security-updates/2024-May/018629.html
• IBM Security Bulletin 7155800 vom 2024-05-31
  https://www.ibm.com/support/pages/node/7155800
• IBM Security Bulletin 7156257 vom 2024-06-03
  https://www.ibm.com/support/pages/node/7156257
• IBM Security Bulletin 7155321 vom 2024-06-04
  https://www.ibm.com/support/pages/node/7155321
• Ubuntu Security Notice USN-6810-1 vom 2024-06-06
  https://ubuntu.com/security/notices/USN-6810-1
• Ubuntu Security Notice USN-6811-1 vom 2024-06-06
  https://ubuntu.com/security/notices/USN-6811-1
• Ubuntu Security Notice USN-6812-1 vom 2024-06-06
  https://ubuntu.com/security/notices/USN-6812-1
• Ubuntu Security Notice USN-6813-1 vom 2024-06-06
  https://ubuntu.com/security/notices/USN-6813-1
• IBM Security Bulletin 7145433 vom 2024-06-11
  https://www.ibm.com/support/pages/node/7145433
• Red Hat Security Advisory RHSA-2024:4079 vom 2024-06-25
  https://access.redhat.com/errata/RHSA-2024:4079
• IBM Security Bulletin 7158591 vom 2024-06-25
  https://www.ibm.com/support/pages/node/7158591
• Red Hat Security Advisory RHSA-2024:4081 vom 2024-06-25
  https://access.redhat.com/errata/RHSA-2024:4081
• IBM Security Bulletin 7157980 vom 2024-06-26
  https://www.ibm.com/support/pages/node/7157980
• IBM Security Bulletin 7159671 vom 2024-07-04
  https://www.ibm.com/support/pages/node/7159671
• IBM Security Bulletin 7159714 vom 2024-07-05
  https://www.ibm.com/support/pages/node/7159714
• Dell Security Advisory DSA-2024-239 vom 2024-07-18
  https://www.dell.com/support/kbdoc/de-de/000227051/dsa-2024-239-security-update-dell-ecs-3-8-1-1-for-multiple-security-vulnerabilities
• Red Hat Security Advisory RHSA-2024:4631 vom 2024-07-18
  https://access.redhat.com/errata/RHSA-2024:4631
• Brocade Security Advisory BSA-2024-2658 vom 2024-07-26
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24820
• IBM Security Bulletin 7162077 vom 2024-07-31
  https://www.ibm.com/support/pages/node/7162077
• Dell Security Advisory DSA-2024-348 vom 2024-08-06
  https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities
• IBM Security Bulletin 7162898 vom 2024-08-06
  https://www.ibm.com/support/pages/node/7162898
• SUSE Security Update SUSE-SU-2024:1859-1 vom 2024-08-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TIV7ZAF6SC76GAAJ3UF2EMATJZA2OLKX/
• SUSE Security Update SUSE-SU-2024:1498-2 vom 2024-08-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/TES3WINTIBIEXGJTEO3T2IMOERMZHFMM/
• SUSE Security Update SUSE-SU-2024:1499-2 vom 2024-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019294.html
• IBM Security Bulletin 7167215 vom 2024-09-05
  https://www.ibm.com/support/pages/node/7167215
• IBM Security Bulletin 7168114 vom 2024-09-11
  https://www.ibm.com/support/pages/node/7168114
• IBM Security Bulletin 7172546 vom 2024-10-08
  https://www.ibm.com/support/pages/node/7172546
• IBM Security Bulletin 7172545 vom 2024-10-08
  https://www.ibm.com/support/pages/node/7172545
• IBM Security Bulletin 7173018 vom 2024-10-14
  https://www.ibm.com/support/pages/node/7173018
• IBM Security Bulletin 7173737 vom 2024-10-22
  https://www.ibm.com/support/pages/node/7173737
• IBM Security Bulletin 7174322 vom 2024-10-29
  https://www.ibm.com/support/pages/node/7174322
• Ubuntu Security Notice USN-7096-1 vom 2024-11-11
  https://ubuntu.com/security/notices/USN-7096-1
• XEROX Security Advisory XRX24-017 vom 2024-11-21
  https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf