Skip to content
OpenAdvisories
Low · 3.7 CVE-2020-2659 EUVD-2020-22452GHSA-j2h3-xh23-6v27

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are …

Published Jan 15, 2020 · Updated Sep 30, 2024 · Assigned by oracle

Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected products

VendorProductAffectedFixed
Oracle Java Java SE: 7u241, 8u231, Java SE Embedded: 8u231 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 9 openjdk-8 8u242-b08-1~deb9u1 DSA-4621-1
Debian 8 openjdk-7 7u251-2.6.21-1~deb8u1 DLA-2128-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS openjdk-8 8u242-b08-0ubuntu3~18.04 USN-4257-1
Ubuntu 18.04 LTS openjdk-lts 11.0.6+10-1ubuntu1~18.04.1 USN-4257-1
Ubuntu 16.04 LTS openjdk-8 8u242-b08-0ubuntu3~16.04 USN-4257-1
ReleasePackageFixed inAdvisory
RHEL 8 java-1.8.0-ibm +7 1:1.8.0.6.5-1.el8_1 RHSA-2020:0465
RHEL 8 java-1.8.0-openjdk +7 1:1.8.0.242.b08-0.el8_1 RHSA-2020:0202
RHEL 7 java-1.7.0-openjdk +6 1:1.7.0.251-2.6.21.0.el7_7 RHSA-2020:0541
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.4.60-1jpp.1.el7 RHSA-2020:0468
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.6.5-1jpp.1.el7 RHSA-2020:0470
RHEL 7 java-1.8.0-openjdk +15 1:1.8.0.242.b08-0.el7_7 RHSA-2020:0196
RHEL 6 java-1.7.0-openjdk +4 1:1.7.0.251-2.6.21.0.el6_10 RHSA-2020:0632
RHEL 6 java-1.7.1-ibm +5 1:1.7.1.4.60-1jpp.1.el6_10 RHSA-2020:0467
RHEL 6 java-1.8.0-ibm +5 1:1.8.0.6.5-1jpp.1.el6_10 RHSA-2020:0469
RHEL 6 java-1.8.0-openjdk +11 1:1.8.0.242.b07-1.el6_10 RHSA-2020:0157
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.0 E4S java-1.8.0-openjdk +7 1:1.8.0.242.b08-0.el8_0 RHSA-2020:0231
Red Hat Network Satellite 5 java-1.8.0-ibm +1 1:1.8.0.6.5-1jpp.1.el6_10 RHSA-2020:0856
ReleasePackageFixed inAdvisory
SLES 15 SP1 java-1_8_0-ibm 1.8.0_sr6.5-3.33.2 SUSE-SU-2020:0466-1
SLES 15 SP1 java-1_8_0-openjdk 1.8.0.242-3.30.2 SUSE-SU-2020:0231-1
SLES 15 java-1_8_0-ibm 1.8.0_sr6.5-3.33.2 SUSE-SU-2020:0466-1
SLES 15 java-1_8_0-openjdk 1.8.0.242-3.30.2 SUSE-SU-2020:0231-1
SLES 12 SP5 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES 12 SP5 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES 12 SP5 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES 12 SP5 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES 12 SP4 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES 12 SP4 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES 12 SP4 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES 12 SP4 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES 12 SP3 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES 12 SP3 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES 12 SP3 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES 12 SP3 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES 12 SP2 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES 12 SP2 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES 12 SP2 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES 12 SP1 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES 12 SP1 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES 12 SP1 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES 12 SP1 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr4.60-26.50.1 SUSE-SU-2020:14287-1
SLES for SAP 15 java-1_8_0-ibm 1.8.0_sr6.5-3.33.2 SUSE-SU-2020:0466-1
SLES for SAP 15 java-1_8_0-openjdk 1.8.0.242-3.30.2 SUSE-SU-2020:0231-1
SLES for SAP 12 SP5 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES for SAP 12 SP5 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES for SAP 12 SP5 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES for SAP 12 SP5 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES for SAP 12 SP4 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES for SAP 12 SP4 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES for SAP 12 SP4 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES for SAP 12 SP4 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES for SAP 12 SP3 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES for SAP 12 SP3 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES for SAP 12 SP3 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES for SAP 12 SP3 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES for SAP 12 SP2 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES for SAP 12 SP2 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES for SAP 12 SP2 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES for SAP 12 SP2 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SLES for SAP 12 SP1 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SLES for SAP 12 SP1 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SLES for SAP 12 SP1 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SLES for SAP 12 SP1 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SUSE OpenStack Cloud Crowbar 8 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SUSE OpenStack Cloud 8 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SUSE OpenStack Cloud 8 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SUSE OpenStack Cloud 8 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SUSE OpenStack Cloud 8 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SUSE OpenStack Cloud 7 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SUSE OpenStack Cloud 7 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SUSE OpenStack Cloud 7 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SUSE OpenStack Cloud 7 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm 1.7.0_sr10.60-65.48.1 SUSE-SU-2020:14286-1
SUSE HPE Helion OpenStack 8 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SUSE HPE Helion OpenStack 8 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SUSE HPE Helion OpenStack 8 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SUSE HPE Helion OpenStack 8 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
SUSE Enterprise Storage 5 java-1_7_0-openjdk 1.7.0.251-43.35.1 SUSE-SU-2020:0628-1
SUSE Enterprise Storage 5 java-1_7_1-ibm 1.7.1_sr4.60-38.47.1 SUSE-SU-2020:0456-1
SUSE Enterprise Storage 5 java-1_8_0-ibm 1.8.0_sr6.5-30.63.1 SUSE-SU-2020:0528-1
SUSE Enterprise Storage 5 java-1_8_0-openjdk 1.8.0.242-27.41.1 SUSE-SU-2020:0261-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-1_8_0-openjdk 1.8.0.302-2.2 openSUSE-SU-2024:10876-1
openSUSE Leap 15.1 java-1_8_0-openjdk 1.8.0.242-lp151.2.9.1 openSUSE-SU-2020:0147-1
ReleasePackageFixed inAdvisory
Alpine v3.24 openjdk8 8.242.08-r0 —
Alpine v3.23 openjdk8 8.242.08-r0 —
Alpine v3.22 openjdk8 8.242.08-r0 —
Alpine v3.21 openjdk8 8.242.08-r0 —
Alpine v3.20 openjdk8 8.242.08-r0 —
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openjdk8 8.242.08-r0 —
Alpine v3.18 openjdk7 7.251.2.6.21-r0 —
Alpine v3.18 openjdk8 8.242.08-r0 —
Alpine v3.17 openjdk7 7.251.2.6.21-r0 —
Alpine v3.17 openjdk8 8.242.08-r0 —
Alpine v3.16 openjdk7 7.251.2.6.21-r0 —
Alpine v3.16 openjdk8 8.242.08-r0 —
Alpine v3.15 openjdk7 7.251.2.6.21-r0 —
Alpine v3.15 openjdk8 8.242.08-r0 —
Alpine v3.14 openjdk7 7.251.2.6.21-r0 —
Alpine v3.14 openjdk8 8.242.08-r0 —
Alpine v3.13 openjdk7 7.251.2.6.21-r0 —
Alpine v3.13 openjdk8 8.242.08-r0 —
Alpine v3.12 openjdk7 7.251.2.6.21-r0 —
Alpine v3.12 openjdk8 8.242.08-r0 —
Alpine v3.11 openjdk7 7.251.2.6.21-r0 —
Alpine v3.11 openjdk8 8.242.08-r0 —
Alpine v3.10 openjdk7 7.251.2.6.21-r0 —
Alpine v3.10 openjdk8 8.242.08-r0 —
Alpine v3.9 openjdk7 7.251.2.6.21-r0 —
Alpine v3.9 openjdk8 8.242.08-r0 —
Alpine v3.8 openjdk8 8.242.08-r0 —
Alpine v3.7 openjdk8 8.242.08-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 java-1.7.0-openjdk +6 1:1.7.0.251-2.6.21.0.amzn2.0.1 ALAS2-2020-1403
Amazon Linux 2 java-1.8.0-openjdk +15 1:1.8.0.242.b08-0.amzn2.0.1 ALAS2-2020-1396
Amazon Linux 2 java-11-amazon-corretto +2 1:11.0.6+10-1.amzn2 ALAS2-2020-1387

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 java-1.8.0-openjdk +7 1:1.8.0.242.b08-0.el8_1 ELSA-2020-0202
Oracle Linux 7 java-1.7.0-openjdk +6 1:1.7.0.251-2.6.21.0.0.1.el7_7 ELSA-2020-0541
Oracle Linux 7 java-1.8.0-openjdk +15 1:1.8.0.242.b08-0.el7_7 ELSA-2020-0196

Advisories 32

References