DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE: Mehrere Schwachstellen
view advisory published 2024-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21235US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected… | ||||
| CVE-2024-21217US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are af… | ||||
| CVE-2024-21211US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affecte… | ||||
| CVE-2024-21210US | — | — | ||
Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to ex… | ||||
| CVE-2024-21208US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec… | ||||
| CVE-2024-36138US | — | — | ||
Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync… | ||||
| CVE-2023-42950US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Proc… | ||||
| CVE-2024-25062US | high7.5 | — | ||
An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafte… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:10926 vom 2024-12-10external
- Red Hat Security Advisory RHSA-2024:8116 vom 2024-10-17external
- Red Hat Security Advisory RHSA-2024:8118 vom 2024-10-16external
- Red Hat Security Advisory RHSA-2024:8119 vom 2024-10-16external
- Red Hat Security Advisory RHSA-2024:8120 vom 2024-10-16external
- Red Hat Security Advisory RHSA-2024:8121 vom 2024-10-16external
- Red Hat Security Advisory RHSA-2024:8122 vom 2024-10-16external
- Red Hat Security Advisory RHSA-2024:8123 vom 2024-10-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan