DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Oracle Java SE: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2019-07-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-2842US | low3.7 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows un… | ||||
| CVE-2019-2821US | medium5.3 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerabili… | ||||
| CVE-2019-2818US | low3.1 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnera… | ||||
| CVE-2019-2816US | medium4.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12… | ||||
| CVE-2019-2786US | low3.4 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Jav… | ||||
| CVE-2019-2769US | medium5.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.… | ||||
| CVE-2019-2766US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12… | ||||
| CVE-2019-2762US | medium5.3 | — | ||
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.… | ||||
| CVE-2019-2745US | medium5.1 | — | ||
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit v… | ||||
| CVE-2019-7317US | medium5.3 | — | ||
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. | ||||
| CVE-2019-6129US | medium6.5 | — | ||
png_create_info_struct in png.c in libpng 1.6.36 has a memory leak, as demonstrated by pngcp. NOTE: a third party has stated "I don't think it is libpng's job to free this buffer. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2019:1810 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1811 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1815 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1839 vom 2019-07-24external
- CentOS Security Advisory CESA-2019:1840 vom 2019-07-24external
- Oracle Linux Security Advisory ELSA-2019-1810 vom 2019-07-23external
- Oracle Linux Security Advisory ELSA-2019-1811 vom 2019-07-22external
- Oracle Linux Security Advisory ELSA-2019-1815 vom 2019-07-23external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan