Medium WID-SEC-2024-3206 4 CVEs

Amazon Corretto: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Oct 15, 2024 · Updated Nov 6, 2024 · Revision 3 · de-DE

Vendor: amazon Vendor: Hitachi Product: Command Suite Product: Configuration Manager Product: Corretto Product: Linux 2 Product: Ops Center Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Amazon Corretto ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Amazon Corretto ist eine Distribution des Open Java Development Kit (OpenJDK).

Vulnerabilities 4

Medium 4.8

CVE-2024-21235

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21208

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21210

Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024

Revision history

2024-11-06 #3
Neue Updates von HITACHI aufgenommen
2024-10-31 #2
Neue Updates von Amazon aufgenommen
2024-10-15 #1
Initiale Fassung

References

Corretto Changelog vom 2024-10-15
https://github.com/corretto/corretto-8/blob/release-8.432.06.1/CHANGELOG.md
Amazon Linux Security Advisory ALASCORRETTO8-2024-014 vom 2024-10-31
https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2024-014.html
Amazon Linux Security Advisory ALAS-2024-2683 vom 2024-11-01
https://alas.aws.amazon.com/AL2/ALAS-2024-2683.html
Amazon Linux Security Advisory ALAS-2024-2684 vom 2024-11-01
https://alas.aws.amazon.com/AL2/ALAS-2024-2684.html
Hitachi Vulnerability Information HITACHI-SEC-2024-147 vom 2024-11-07
https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-147/index.html