Medium WID-SEC-2024-1647 6 CVEs

Amazon Corretto: Mehrere Schwachstellen

Published Jul 16, 2024 · Updated Nov 11, 2024 · Revision 2 · de-DE

Vendor: amazon Vendor: IBM Product: Corretto Product: Java SDK Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Amazon Corretto ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.

Product

Amazon Corretto ist eine Distribution des Open Java Development Kit (OpenJDK).

Vulnerabilities 6

High 7.4

CVE-2024-21147

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Medium 4.8

CVE-2024-21140

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Medium 4.8

CVE-2024-21145

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21131

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21138

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21144

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrenc…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024

Revision history

2024-11-11 #2
Neue Updates von IBM aufgenommen
2024-07-16 #1
Initiale Fassung

References

Change Log for Amazon Corretto 11 vom 2024-07-16
https://github.com/corretto/corretto-11/blob/release-11.0.24.8.1/CHANGELOG.md
Change Log for Amazon Corretto 8 vom 2024-07-16
https://github.com/corretto/corretto-8/blob/release-8.422.05.1/CHANGELOG.md
IBM Security Bulletin 6985269 vom 2024-11-11
https://aix.software.ibm.com/aix/efixes/security/java_nov2024_advisory.asc