DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Oracle Java SE: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2019-10-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle Java SE Embedded ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
beschreibt (20)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-2999US | medium4.7 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Difficult to exploit vul… | ||||
| CVE-2019-2996US | medium4.2 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221.… | ||||
| CVE-2019-2992US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2989US | medium6.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2988US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2987US | low3.7 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows u… | ||||
| CVE-2019-2983US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13;… | ||||
| CVE-2019-2981US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE E… | ||||
| CVE-2019-2978US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2977US | medium4.8 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability all… | ||||
| CVE-2019-2975US | medium4.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2973US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE E… | ||||
| CVE-2019-2964US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Ja… | ||||
| CVE-2019-2962US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Emb… | ||||
| CVE-2019-2958US | medium5.9 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2949US | medium6.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2945US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Jav… | ||||
| CVE-2019-2933US | low3.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-2894US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java… | ||||
| CVE-2019-11068US | critical9.8 | — | ||
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2019:3127 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3128 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3136 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3157 vom 2019-10-23external
- CentOS Security Advisory CESA-2019:3158 vom 2019-10-23external
- SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19external
- SUSE Security Update SUSE-SU-2020:1685-1 vom 2020-06-19external
- Debian Security Advisory DSA-4546 vom 2019-10-21external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan