DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE: Mehrere Schwachstellen
view advisory published 2019-07-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-2842US | low3.7 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows un… | ||||
| CVE-2019-2821US | medium5.3 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerabili… | ||||
| CVE-2019-2818US | low3.1 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnera… | ||||
| CVE-2019-2816US | medium4.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12… | ||||
| CVE-2019-2786US | low3.4 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Jav… | ||||
| CVE-2019-2769US | medium5.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.… | ||||
| CVE-2019-2766US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12… | ||||
| CVE-2019-2762US | medium5.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.… | ||||
| CVE-2019-2745US | medium5.1 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit v… | ||||
| CVE-2019-7317US | medium5.3 | — | ||
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | ||||
| CVE-2019-6129US | medium6.5 | — | ||
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer. | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2019:1810 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1811 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1815 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1839 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1840 vom 2019-07-24external
- Oracle Linux Security Advisory ELSA-2019-1810 vom 2019-07-23external
- Oracle Linux Security Advisory ELSA-2019-1811 vom 2019-07-22external
- Oracle Linux Security Advisory ELSA-2019-1815 vom 2019-07-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan