DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Oracle Java SE: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2020-01-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-2659US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedde… | ||||
| CVE-2020-2655US | medium4.8 | Exploit | ||
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability al… | ||||
| CVE-2020-2654US | low3.7 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to explo… | ||||
| CVE-2020-2604US | high8.1 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0… | ||||
| CVE-2020-2601US | medium6.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; J… | ||||
| CVE-2020-2593US | medium4.8 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1;… | ||||
| CVE-2020-2590US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; J… | ||||
| CVE-2020-2585US | medium5.9 | — | ||
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unau… | ||||
| CVE-2020-2583US | low3.7 | — | ||
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0… | ||||
| CVE-2019-16168US | medium6.5 | — | ||
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe divis… | ||||
| CVE-2019-13118US | medium5.3 | — | ||
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNu… | ||||
| CVE-2019-13117US | medium5.3 | — | ||
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers. This could allow an attacker to disce… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CentOS Security Advisory CESA-2020:0122 vom 2020-01-18external
- CentOS Security Advisory CESA-2020:0122 vom 2020-01-18external
- CentOS Security Advisory CESA-2020:0157 vom 2020-01-28external
- CentOS Security Advisory CESA-2020:0196 vom 2020-01-28external
- CentOS Security Advisory CESA-2020:0541 vom 2020-02-18external
- SUSE Security Update SUSE-SU-2020:14391-1 vom 2020-06-10external
- SUSE Security Update SUSE-SU-2020:14398-1 vom 2020-06-17external
- SUSE Security Update SUSE-SU-2020:1684-1 vom 2020-06-19external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan