Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-2769 (GCVE-0-2019-2769)
Vulnerability from cvelistv5 – Published: 2019-07-23 22:31 – Updated: 2024-10-15 18:58- Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded.
| Vendor | Product | Version | |
|---|---|---|---|
| Oracle Corporation | Java |
Affected:
Java SE: 7u221, 8u212, 11.0.3, 12.0.1
Affected: Java SE Embedded: 8u211 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T19:03:41.899Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2019-2769",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-15T17:29:56.497071Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-15T18:58:18.052Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Java",
"vendor": "Oracle Corporation",
"versions": [
{
"status": "affected",
"version": "Java SE: 7u221, 8u212, 11.0.3, 12.0.1"
},
{
"status": "affected",
"version": "Java SE Embedded: 8u211"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded.",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-01-17T22:06:05.000Z",
"orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"shortName": "oracle"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "USN-4080-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "RHSA-2019:2494",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"name": "RHSA-2019:2585",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2019-2769",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Java",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "Java SE: 7u221, 8u212, 11.0.3, 12.0.1"
},
{
"version_affected": "=",
"version_value": "Java SE Embedded: 8u211"
}
]
}
}
]
},
"vendor_name": "Oracle Corporation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "USN-4080-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "RHSA-2019:2494",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"name": "RHSA-2019:2585",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
"assignerShortName": "oracle",
"cveId": "CVE-2019-2769",
"datePublished": "2019-07-23T22:31:45.000Z",
"dateReserved": "2018-12-14T00:00:00.000Z",
"dateUpdated": "2024-10-15T18:58:18.052Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-2769",
"date": "2026-05-20",
"epss": "0.00542",
"percentile": "0.67893"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*\", \"matchCriteriaId\": \"CBFFE773-E37C-40E2-91FC-65C758A3B3A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*\", \"matchCriteriaId\": \"0DBD2DA4-CA79-41DE-99A0-0B7B98EBFD9D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*\", \"matchCriteriaId\": \"99FCBFD3-0E67-48CF-A3CD-F71397AE26A6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"32318CC6-B8C4-4429-BB8B-134DC202A27E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*\", \"matchCriteriaId\": \"3AA18B51-FD7A-4306-8CF6-FA17414D5933\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*\", \"matchCriteriaId\": \"921A797F-2AFB-4E26-9140-4F212FED3C3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*\", \"matchCriteriaId\": \"49EE3286-7E1A-4CA5-94BA-17D131D0B8C2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"18C60526-0E63-486E-B252-3D4466215FB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2908FB9-138F-4376-962E-D2582B5ACAEE\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\", \"matchCriteriaId\": \"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\", \"matchCriteriaId\": \"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C3741B8-851F-475D-B428-523F4F722350\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BBCD86A-E6C7-4444-9D74-F861084090F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\", \"versionEndExcluding\": \"8.7.0-00\", \"matchCriteriaId\": \"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEB90C24-D252-4099-A7A1-9F8754DFB4A5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"106FDF5A-D377-4E5F-8BF9-09290019C98A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B00DDE7-7002-45BE-8EDE-65D964922CB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*\", \"matchCriteriaId\": \"7DE847E0-431D-497D-9C57-C4E59749F6A0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*\", \"matchCriteriaId\": \"46385384-5561-40AA-9FDE-A2DE4FDFAD3E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F1E78106-58E6-4D59-990F-75DA575BFAD9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}, {\"lang\": \"es\", \"value\": \"Una Vulnerabilidad en el componente Java SE, Java SE Embedded de Java SE de Oracle (subcomponente: Utilities). Las versiones compatibles que est\\u00e1n afectadas son Java SE: 7u221, 8u212, 11.0.3 y 12.0.1; Java SE Embedded: versi\\u00f3n 8u211. Una vulnerabilidad f\\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red por medio de m\\u00faltiples protocolos comprometer a Java SE, Java SE Embedded. Los ataques con \\u00e9xito de esta vulnerabilidad pueden causar una capacidad no autorizada para causar una denegaci\\u00f3n de servicio parcial (DOS parcial) de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad se aplica a las implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox (en Java SE versi\\u00f3n 8), que cargan y ejecutan c\\u00f3digo no confiable (por ejemplo, c\\u00f3digo que proviene de Internet) y conf\\u00edan en el sandbox de Java por seguridad. Esta vulnerabilidad tambi\\u00e9n se puede explotar mediante el uso de la API en el componente especificado, por ejemplo, por medio de un servicio web que proporciona datos a las API. CVSS 3.0 Puntuaci\\u00f3n base 5.3 (impactos de disponibilidad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}]",
"id": "CVE-2019-2769",
"lastModified": "2024-11-21T04:41:31.510",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 1.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2019-07-23T23:15:40.287",
"references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"secalert_us@oracle.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "secalert_us@oracle.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2019-2769\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2019-07-23T23:15:40.287\",\"lastModified\":\"2024-11-21T04:41:31.510\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"},{\"lang\":\"es\",\"value\":\"Una Vulnerabilidad en el componente Java SE, Java SE Embedded de Java SE de Oracle (subcomponente: Utilities). Las versiones compatibles que est\u00e1n afectadas son Java SE: 7u221, 8u212, 11.0.3 y 12.0.1; Java SE Embedded: versi\u00f3n 8u211. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red por medio de m\u00faltiples protocolos comprometer a Java SE, Java SE Embedded. Los ataques con \u00e9xito de esta vulnerabilidad pueden causar una capacidad no autorizada para causar una denegaci\u00f3n de servicio parcial (DOS parcial) de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad se aplica a las implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox (en Java SE versi\u00f3n 8), que cargan y ejecutan c\u00f3digo no confiable (por ejemplo, c\u00f3digo que proviene de Internet) y conf\u00edan en el sandbox de Java por seguridad. Esta vulnerabilidad tambi\u00e9n se puede explotar mediante el uso de la API en el componente especificado, por ejemplo, por medio de un servicio web que proporciona datos a las API. CVSS 3.0 Puntuaci\u00f3n base 5.3 (impactos de disponibilidad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBFFE773-E37C-40E2-91FC-65C758A3B3A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DBD2DA4-CA79-41DE-99A0-0B7B98EBFD9D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*\",\"matchCriteriaId\":\"99FCBFD3-0E67-48CF-A3CD-F71397AE26A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAF3DD5E-1A96-4285-84BA-EB5E31EF2516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32318CC6-B8C4-4429-BB8B-134DC202A27E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AA18B51-FD7A-4306-8CF6-FA17414D5933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*\",\"matchCriteriaId\":\"921A797F-2AFB-4E26-9140-4F212FED3C3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*\",\"matchCriteriaId\":\"49EE3286-7E1A-4CA5-94BA-17D131D0B8C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18C60526-0E63-486E-B252-3D4466215FB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2908FB9-138F-4376-962E-D2582B5ACAEE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD783B0C-9246-47D9-A937-6144FE8BFF0F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4F86C3C-B99C-44C6-97D7-163DC3F59687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C3741B8-851F-475D-B428-523F4F722350\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*\",\"versionEndExcluding\":\"8.7.0-00\",\"matchCriteriaId\":\"6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEB90C24-D252-4099-A7A1-9F8754DFB4A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"106FDF5A-D377-4E5F-8BF9-09290019C98A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B00DDE7-7002-45BE-8EDE-65D964922CB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DE847E0-431D-497D-9C57-C4E59749F6A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"46385384-5561-40AA-9FDE-A2DE4FDFAD3E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1E78106-58E6-4D59-990F-75DA575BFAD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B620311B-34A3-48A6-82DF-6F078D7A4493\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2494\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2495\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2585\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2590\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2592\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2019:2737\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4080-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/4083-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\", \"name\": \"[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\", \"x_transferred\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T19:03:41.899Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2019-2769\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-15T17:29:56.497071Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-15T18:24:19.983Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Oracle Corporation\", \"product\": \"Java\", \"versions\": [{\"status\": \"affected\", \"version\": \"Java SE: 7u221, 8u212, 11.0.3, 12.0.1\"}, {\"status\": \"affected\", \"version\": \"Java SE Embedded: 8u211\"}]}], \"references\": [{\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"tags\": [\"vendor-advisory\", \"x_refsource_UBUNTU\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"tags\": [\"vendor-advisory\", \"x_refsource_SUSE\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\", \"name\": \"[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update\", \"tags\": [\"mailing-list\", \"x_refsource_MLIST\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded.\"}]}], \"providerMetadata\": {\"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\", \"dateUpdated\": \"2020-01-17T22:06:05.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"Java SE: 7u221, 8u212, 11.0.3, 12.0.1\", \"version_affected\": \"=\"}, {\"version_value\": \"Java SE Embedded: 8u211\", \"version_affected\": \"=\"}]}, \"product_name\": \"Java\"}]}, \"vendor_name\": \"Oracle Corporation\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"name\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://usn.ubuntu.com/4080-1/\", \"name\": \"USN-4080-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://usn.ubuntu.com/4083-1/\", \"name\": \"USN-4083-1\", \"refsource\": \"UBUNTU\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2494\", \"name\": \"RHSA-2019:2494\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2495\", \"name\": \"RHSA-2019:2495\", \"refsource\": \"REDHAT\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html\", \"name\": \"openSUSE-SU-2019:1916\", \"refsource\": \"SUSE\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html\", \"name\": \"openSUSE-SU-2019:1912\", \"refsource\": \"SUSE\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\", \"name\": \"[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update\", \"refsource\": \"MLIST\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2585\", \"name\": \"RHSA-2019:2585\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2590\", \"name\": \"RHSA-2019:2590\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2592\", \"name\": \"RHSA-2019:2592\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2019:2737\", \"name\": \"RHSA-2019:2737\", \"refsource\": \"REDHAT\"}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"name\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300\", \"refsource\": \"CONFIRM\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"name\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us\", \"refsource\": \"CONFIRM\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded.\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2019-2769\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"secalert_us@oracle.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2019-2769\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-15T18:58:18.052Z\", \"dateReserved\": \"2018-12-14T00:00:00.000Z\", \"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"datePublished\": \"2019-07-23T22:31:45.000Z\", \"assignerShortName\": \"oracle\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2019-AVI-340
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Java SE versions 7u221, 8u212, 11.0.3 et 12.0.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Java SE Embedded version 8u211",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"name": "CVE-2019-2821",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2821"
},
{
"name": "CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2019-2766",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2766"
},
{
"name": "CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"name": "CVE-2019-2818",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2818"
},
{
"name": "CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"name": "CVE-2019-2745",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2745"
},
{
"name": "CVE-2019-2842",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2842"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-340",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-07-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2019-5072835 du 16 juillet 2019",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2019verbose-5072838-5072835 du 16 juillet 2019",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019verbose-5072838.html#JAVA"
}
]
}
CERTFR-2020-AVI-169
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans IBM SDK, Java Technology Edition. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une exécution de code arbitraire et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "IBM Cloud Application Performance Management versions 8.1.3 et 8.1.4",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Jazz for Service Management version 1.1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "IBM CICS Transaction Gateway versions 8.0, 8.1, 9.0, 9.1 et 9.2",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-2978",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2978"
},
{
"name": "CVE-2019-2945",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2945"
},
{
"name": "CVE-2019-2958",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2958"
},
{
"name": "CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"name": "CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"name": "CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"name": "CVE-2019-2987",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2987"
},
{
"name": "CVE-2019-2988",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2988"
},
{
"name": "CVE-2019-4732",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-4732"
},
{
"name": "CVE-2020-2593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2593"
},
{
"name": "CVE-2019-4473",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-4473"
},
{
"name": "CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"name": "CVE-2019-11771",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11771"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2020-2659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2659"
},
{
"name": "CVE-2019-2962",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2962"
},
{
"name": "CVE-2019-2766",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2766"
},
{
"name": "CVE-2019-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2981"
},
{
"name": "CVE-2019-2989",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2989"
},
{
"name": "CVE-2019-17631",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17631"
},
{
"name": "CVE-2019-2933",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2933"
},
{
"name": "CVE-2020-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2583"
},
{
"name": "CVE-2019-2964",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2964"
},
{
"name": "CVE-2019-2999",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2999"
},
{
"name": "CVE-2020-2604",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2604"
},
{
"name": "CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"name": "CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"name": "CVE-2019-2996",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2996"
},
{
"name": "CVE-2019-2894",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2894"
},
{
"name": "CVE-2019-2992",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2992"
},
{
"name": "CVE-2019-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2973"
},
{
"name": "CVE-2019-2977",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2977"
},
{
"name": "CVE-2019-2983",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2983"
},
{
"name": "CVE-2019-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2975"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-169",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-03-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans IBM SDK, Java\nTechnology Edition. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une ex\u00e9cution de\ncode arbitraire et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans IBM SDK, Java Technology Edition",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113512 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113512"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113404 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113404"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113410 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113410"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 5967777 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/5967777"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113416 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113416"
}
]
}
CERTFR-2019-AVI-340
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à l'intégrité des données et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Java SE versions 7u221, 8u212, 11.0.3 et 12.0.1",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
},
{
"description": "Java SE Embedded version 8u211",
"product": {
"name": "Java SE",
"vendor": {
"name": "Oracle",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"name": "CVE-2019-2821",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2821"
},
{
"name": "CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2019-2766",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2766"
},
{
"name": "CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"name": "CVE-2019-2818",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2818"
},
{
"name": "CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"name": "CVE-2019-2745",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2745"
},
{
"name": "CVE-2019-2842",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2842"
}
],
"links": [],
"reference": "CERTFR-2019-AVI-340",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2019-07-17T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Oracle Java SE.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance, une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Oracle Java SE",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2019-5072835 du 16 juillet 2019",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Oracle cpujul2019verbose-5072838-5072835 du 16 juillet 2019",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019verbose-5072838.html#JAVA"
}
]
}
CERTFR-2020-AVI-169
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans IBM SDK, Java Technology Edition. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une exécution de code arbitraire et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "IBM Cloud Application Performance Management versions 8.1.3 et 8.1.4",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Jazz for Service Management version 1.1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "IBM CICS Transaction Gateway versions 8.0, 8.1, 9.0, 9.1 et 9.2",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-2978",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2978"
},
{
"name": "CVE-2019-2945",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2945"
},
{
"name": "CVE-2019-2958",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2958"
},
{
"name": "CVE-2019-11772",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11772"
},
{
"name": "CVE-2019-11775",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11775"
},
{
"name": "CVE-2019-2816",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2816"
},
{
"name": "CVE-2019-2987",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2987"
},
{
"name": "CVE-2019-2988",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2988"
},
{
"name": "CVE-2019-4732",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-4732"
},
{
"name": "CVE-2020-2593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2593"
},
{
"name": "CVE-2019-4473",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-4473"
},
{
"name": "CVE-2019-2769",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2769"
},
{
"name": "CVE-2019-11771",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11771"
},
{
"name": "CVE-2019-7317",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-7317"
},
{
"name": "CVE-2020-2659",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2659"
},
{
"name": "CVE-2019-2962",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2962"
},
{
"name": "CVE-2019-2766",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2766"
},
{
"name": "CVE-2019-2981",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2981"
},
{
"name": "CVE-2019-2989",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2989"
},
{
"name": "CVE-2019-17631",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17631"
},
{
"name": "CVE-2019-2933",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2933"
},
{
"name": "CVE-2020-2583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2583"
},
{
"name": "CVE-2019-2964",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2964"
},
{
"name": "CVE-2019-2999",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2999"
},
{
"name": "CVE-2020-2604",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-2604"
},
{
"name": "CVE-2019-2762",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2762"
},
{
"name": "CVE-2019-2786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2786"
},
{
"name": "CVE-2019-2996",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2996"
},
{
"name": "CVE-2019-2894",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2894"
},
{
"name": "CVE-2019-2992",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2992"
},
{
"name": "CVE-2019-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2973"
},
{
"name": "CVE-2019-2977",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2977"
},
{
"name": "CVE-2019-2983",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2983"
},
{
"name": "CVE-2019-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2975"
}
],
"links": [],
"reference": "CERTFR-2020-AVI-169",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-03-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans IBM SDK, Java\nTechnology Edition. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une ex\u00e9cution de\ncode arbitraire et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans IBM SDK, Java Technology Edition",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113512 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113512"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113404 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113404"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113410 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113410"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 5967777 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/5967777"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 IBM 6113416 du 20 mars 2020",
"url": "https://www.ibm.com/support/pages/node/6113416"
}
]
}
BDU:2023-03696
Vulnerability from fstec - Published: 16.07.2019{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO295",
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO295 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f OpenJDK11U-JRE",
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Red Hat Inc., Novell Inc., Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Oracle Corp., \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "6 (Red Hat Enterprise Linux), 7 (Red Hat Enterprise Linux), 12 SP3 (Suse Linux Enterprise Desktop), 12 SP4 (Suse Linux Enterprise Desktop), 12 SP2 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (SUSE Linux Enterprise Server for SAP Applications), 12 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP3 (Suse Linux Enterprise Server), 12 SP4 (Suse Linux Enterprise Server), 11 SP4 (Suse Linux Enterprise Server), 19.04 (Ubuntu), 8 (Red Hat Enterprise Linux), 15.0 (OpenSUSE Leap), 12 SP2-BCL (Suse Linux Enterprise Server), 12 SP2-ESPOS (Suse Linux Enterprise Server), 12-LTSS (Suse Linux Enterprise Server), 11 SP4 (SUSE Linux Enterprise Server for SAP Applications), 12 SP1 (SUSE Linux Enterprise Server for SAP Applications), 15 (SUSE Linux Enterprise Server for SAP Applications), 15 SP1 (SUSE Linux Enterprise Server for SAP Applications), 11 SP4-LTSS (Suse Linux Enterprise Server), 12 SP1-LTSS (Suse Linux Enterprise Server), 12 SP2-LTSS (Suse Linux Enterprise Server), 12 SP3-LTSS (Suse Linux Enterprise Server), 12 SP3-BCL (Suse Linux Enterprise Server), 12 SP5 (Suse Linux Enterprise Server), 12 SP5 (SUSE Linux Enterprise Server for SAP Applications), 11 SP3-LTSS (Suse Linux Enterprise Server), 10 (Debian GNU/Linux), 7u221 (Java SE), 8u212 (Java SE), 11.0.3 (Java SE), 12.0.1 (Java SE), 12 SP3-ESPOS (Suse Linux Enterprise Server), 12 SP2 (Suse Linux Enterprise Desktop), 12 SP2 (Suse Linux Enterprise Server), 15-LTSS (Suse Linux Enterprise Server), 5.8 (Red Hat Satellite), 12 SP1 (Suse Linux Enterprise Desktop), 12 SP1 (Suse Linux Enterprise Server), 12 (SUSE Linux Enterprise Server for SAP Applications), 11 SP4 (Suse Linux Enterprise Desktop), 11 SP3 (Suse Linux Enterprise Server), 12 (Suse Linux Enterprise Desktop), 15.2 (OpenSUSE Leap), 12 SP4-ESPOS (Suse Linux Enterprise Server), 15.1 (OpenSUSE Leap), 6 Supplementary (Red Hat Enterprise Linux), 15 SP1-BCL (Suse Linux Enterprise Server), 15 SP1-LTSS (Suse Linux Enterprise Server), 16.04 ESM (Ubuntu), 15.3 (OpenSUSE Leap), 15 SP1 (Suse Linux Enterprise Server), 11 (Debian GNU/Linux), 12 (Suse Linux Enterprise Server), 15.4 (OpenSUSE Leap), 15 SP3 (Suse Linux Enterprise Server), 15 SP3 (SUSE Linux Enterprise Server for SAP Applications), 15 SP3 (Suse Linux Enterprise Desktop), 15 SP2 (Suse Linux Enterprise Server), 15 SP2 (SUSE Linux Enterprise Server for SAP Applications), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), 15 SP4 (Suse Linux Enterprise Server), 15 SP2 (Suse Linux Enterprise Desktop), 15 SP4 (Suse Linux Enterprise Desktop), 15 (Suse Linux Enterprise Server), 15 SP2-BCL (Suse Linux Enterprise Server), 15 SP4 (SUSE Linux Enterprise Server for SAP Applications), 15 SP2-LTSS (Suse Linux Enterprise Server), 15 SP1 (Suse Linux Enterprise Desktop), 15 (Suse Linux Enterprise Desktop), 15 SP3-LTSS (Suse Linux Enterprise Server), 15 SP3-BCL (Suse Linux Enterprise Server), 15 SP5 (SUSE Linux Enterprise Server for SAP Applications), 15 SP5 (Suse Linux Enterprise Server), 15 SP5 (Suse Linux Enterprise Desktop), 18.04 ESM (Ubuntu), 11.0.3 (OpenJDK), 12.0.1 (OpenJDK), 8u212 (OpenJDK), 7 Supplementary (Red Hat Enterprise Linux), \u0434\u043e 7u221 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (OpenJDK), 8u211 (Java SE Embedded), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Oracle Corp.:\nhttps://www.oracle.com/security-alerts/cpujul2019.html\n\n\u0414\u043b\u044f OpenJDK:\nhttps://openjdk.org/groups/vulnerability/advisories/2019-07-16\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2019-2769\nhttps://ubuntu.com/security/notices/USN-4080-1\nhttps://ubuntu.com/security/notices/USN-4083-1\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2019-2769\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2019-2769\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Novell Inc.:\nhttps://www.suse.com/security/cve/CVE-2019-2769.html\n\n\u0414\u043b\u044f \u0410\u043b\u044c\u0442 8 \u0421\u041f:\nhttps://cve.basealt.ru/report-29092021-c9f1.html\nhttps://cve.basealt.ru/report-23092021-c9f2.html\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f openjdk-8 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 8u292-b10-repack1-0+deb9u1.osnova11",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.07.2019",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.07.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-03696",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-2769",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Red Hat Enterprise Linux, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, Ubuntu, OpenSUSE Leap, Debian GNU/Linux, Java SE, Red Hat Satellite, \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), OpenJDK, Java SE Embedded, \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Red Hat Inc. Red Hat Enterprise Linux 6 , Red Hat Inc. Red Hat Enterprise Linux 7 , Novell Inc. Suse Linux Enterprise Desktop 12 SP3 , Novell Inc. Suse Linux Enterprise Desktop 12 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP2 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP3 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP4 , Novell Inc. Suse Linux Enterprise Server 12 SP3 , Novell Inc. Suse Linux Enterprise Server 12 SP4 , Novell Inc. Suse Linux Enterprise Server 11 SP4 , Canonical Ltd. Ubuntu 19.04 , Red Hat Inc. Red Hat Enterprise Linux 8 , Novell Inc. OpenSUSE Leap 15.0 32-bit, Novell Inc. Suse Linux Enterprise Server 12 SP2-BCL , Novell Inc. Suse Linux Enterprise Server 12 SP2-ESPOS , Novell Inc. Suse Linux Enterprise Server 12-LTSS , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 11 SP4 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP1 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 SP1 , Novell Inc. Suse Linux Enterprise Server 11 SP4-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP1-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP2-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP3-LTSS , Novell Inc. Suse Linux Enterprise Server 12 SP3-BCL , Novell Inc. Suse Linux Enterprise Server 12 SP5 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 SP5 , Novell Inc. Suse Linux Enterprise Server 11 SP3-LTSS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , Novell Inc. Suse Linux Enterprise Server 12 SP3-ESPOS , Novell Inc. Suse Linux Enterprise Desktop 12 SP2 , Novell Inc. Suse Linux Enterprise Server 12 SP2 , Novell Inc. Suse Linux Enterprise Server 15-LTSS , Novell Inc. Suse Linux Enterprise Desktop 12 SP1 , Novell Inc. Suse Linux Enterprise Server 12 SP1 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 12 , Novell Inc. Suse Linux Enterprise Desktop 11 SP4 , Novell Inc. Suse Linux Enterprise Server 11 SP3 , Novell Inc. Suse Linux Enterprise Desktop 12 , Novell Inc. OpenSUSE Leap 15.2 , Novell Inc. Suse Linux Enterprise Server 12 SP4-ESPOS , Novell Inc. OpenSUSE Leap 15.1 x86 (x32 / IA-32), Red Hat Inc. Red Hat Enterprise Linux 6 Supplementary , Novell Inc. Suse Linux Enterprise Server 15 SP1-BCL , Novell Inc. Suse Linux Enterprise Server 15 SP1-LTSS , Canonical Ltd. Ubuntu 16.04 ESM , Novell Inc. OpenSUSE Leap 15.3 , Novell Inc. Suse Linux Enterprise Server 15 SP1 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , Novell Inc. Suse Linux Enterprise Server 12 , Novell Inc. OpenSUSE Leap 15.4 , Novell Inc. Suse Linux Enterprise Server 15 SP3 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 SP3 , Novell Inc. Suse Linux Enterprise Desktop 15 SP3 , Novell Inc. Suse Linux Enterprise Server 15 SP2 , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 SP2 , \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), Novell Inc. Suse Linux Enterprise Server 15 SP4 , Novell Inc. Suse Linux Enterprise Desktop 15 SP2 , Novell Inc. Suse Linux Enterprise Desktop 15 SP4 , Novell Inc. Suse Linux Enterprise Server 15 , Novell Inc. Suse Linux Enterprise Server 15 SP2-BCL , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 SP4 , Novell Inc. Suse Linux Enterprise Server 15 SP2-LTSS , Novell Inc. Suse Linux Enterprise Desktop 15 SP1 , Novell Inc. Suse Linux Enterprise Desktop 15 , Novell Inc. Suse Linux Enterprise Server 15 SP3-LTSS , Novell Inc. Suse Linux Enterprise Server 15 SP3-BCL , Novell Inc. SUSE Linux Enterprise Server for SAP Applications 15 SP5 , Novell Inc. Suse Linux Enterprise Server 15 SP5 , Novell Inc. Suse Linux Enterprise Desktop 15 SP5 , Canonical Ltd. Ubuntu 18.04 ESM , Red Hat Inc. Red Hat Enterprise Linux 7 Supplementary , \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Utilities \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Oracle Java SE \u0438 Java SE Embedded, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20), \u041d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0440\u043e\u0441\u0441\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 (CWE-770)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Utilities \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Oracle Java SE \u0438 Java SE Embedded \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.oracle.com/security-alerts/cpujul2019.html\nhttps://openjdk.org/groups/vulnerability/advisories/2019-07-16\nhttps://ubuntu.com/security/CVE-2019-2769\nhttps://ubuntu.com/security/notices/USN-4080-1\nhttps://ubuntu.com/security/notices/USN-4083-1\nhttps://security-tracker.debian.org/tracker/CVE-2019-2769\nhttps://lists.debian.org/debian-lts-announce/2019/08/msg00020.html\nhttps://access.redhat.com/security/cve/cve-2019-2769\nhttps://access.redhat.com/errata/RHSA-2019:2494\nhttps://access.redhat.com/errata/RHSA-2019:2495\nhttps://access.redhat.com/errata/RHSA-2019:2585\nhttps://access.redhat.com/errata/RHSA-2019:2590\nhttps://access.redhat.com/errata/RHSA-2019:2592\nhttps://access.redhat.com/errata/RHSA-2019:2737\nhttps://www.suse.com/security/cve/CVE-2019-2769.html\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/7CWQDHDFTQ5TMYECHR6T3YTCURIWVTNU/\nhttps://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WLAA33SFC2BQWUMXROFQCWU3SJN2HD7O/\nhttps://cve.basealt.ru/report-29092021-c9f1.html\nhttps://cve.basealt.ru/report-23092021-c9f2.html\nhttps://www.cybersecurity-help.cz/vdb/SB2022110420\nhttps://safe-surf.ru/specialists/base-vulnerabilities/630664/\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20, CWE-770",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)"
}
CNVD-2019-26752
Vulnerability from cnvd - Published: 2019-08-09厂商已发布了漏洞修复程序,请及时关注更新:https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
| Name | ['Oracle Java SE 7u221', 'Oracle Java SE 8u212', 'Oracle Java SE 11.0.3', 'Oracle Java SE 12.0.1', 'Oracle Java SE Embedded 8u211'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-2769",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
}
},
"description": "Oracle Java SE\u548cOracle Java SE Embedded\u90fd\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Oracle Java SE\u662f\u4e00\u6b3e\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002Oracle Java SE Embedded\u662f\u4e00\u6b3e\u9488\u5bf9\u5d4c\u5165\u5f0f\u7cfb\u7edf\u7684\u3001\u53ef\u79fb\u690d\u7684\u5e94\u7528\u7a0b\u5e8f\u7684Java\u5e73\u53f0\u3002\n\nOracle Java SE\u548cJava SE Embedded\u4e2d\u7684Utilities\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5f71\u54cd\u6570\u636e\u7684\u53ef\u7528\u6027\u3002",
"discovererName": "Jonathan Birch",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1ahttps://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-26752",
"openTime": "2019-08-09",
"patchDescription": "Oracle Java SE\u548cOracle Java SE Embedded\u90fd\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Oracle Java SE\u662f\u4e00\u6b3e\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002Oracle Java SE Embedded\u662f\u4e00\u6b3e\u9488\u5bf9\u5d4c\u5165\u5f0f\u7cfb\u7edf\u7684\u3001\u53ef\u79fb\u690d\u7684\u5e94\u7528\u7a0b\u5e8f\u7684Java\u5e73\u53f0\u3002\r\n\r\nOracle Java SE\u548cJava SE Embedded\u4e2d\u7684Utilities\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5f71\u54cd\u6570\u636e\u7684\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Oracle Java SE\u548cJava SE Embedded\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2019-26752\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Oracle Java SE 7u221",
"Oracle Java SE 8u212",
"Oracle Java SE 11.0.3",
"Oracle Java SE 12.0.1",
"Oracle Java SE Embedded 8u211"
]
},
"referenceLink": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"serverity": "\u4e2d",
"submitTime": "2019-07-17",
"title": "Oracle Java SE\u548cJava SE Embedded\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2019-26752\uff09"
}
FKIE_CVE-2019-2769
Vulnerability from fkie_nvd - Published: 2019-07-23 23:15 - Updated: 2024-11-21 04:41| Vendor | Product | Version | |
|---|---|---|---|
| oracle | jdk | 1.7.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jdk | 11.0.3 | |
| oracle | jdk | 12.0.1 | |
| oracle | jre | 1.7.0 | |
| oracle | jre | 1.8.0 | |
| oracle | jre | 1.8.0 | |
| oracle | jre | 11.0.3 | |
| oracle | jre | 12.0.1 | |
| debian | debian_linux | 8.0 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| canonical | ubuntu_linux | 19.04 | |
| redhat | satellite | 5.8 | |
| redhat | enterprise_linux | 8.0 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_eus | 8.6 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| hp | xp7_command_view | * | |
| mcafee | epolicy_orchestrator | 5.9.0 | |
| mcafee | epolicy_orchestrator | 5.9.1 | |
| mcafee | epolicy_orchestrator | 5.10.0 | |
| mcafee | epolicy_orchestrator | 5.10.0 | |
| mcafee | epolicy_orchestrator | 5.10.0 | |
| mcafee | epolicy_orchestrator | 5.10.0 | |
| mcafee | epolicy_orchestrator | 5.10.0 | |
| opensuse | leap | 15.0 | |
| opensuse | leap | 15.1 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*",
"matchCriteriaId": "CBFFE773-E37C-40E2-91FC-65C758A3B3A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*",
"matchCriteriaId": "0DBD2DA4-CA79-41DE-99A0-0B7B98EBFD9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*",
"matchCriteriaId": "99FCBFD3-0E67-48CF-A3CD-F71397AE26A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "EAF3DD5E-1A96-4285-84BA-EB5E31EF2516",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "32318CC6-B8C4-4429-BB8B-134DC202A27E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*",
"matchCriteriaId": "3AA18B51-FD7A-4306-8CF6-FA17414D5933",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*",
"matchCriteriaId": "921A797F-2AFB-4E26-9140-4F212FED3C3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*",
"matchCriteriaId": "49EE3286-7E1A-4CA5-94BA-17D131D0B8C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "18C60526-0E63-486E-B252-3D4466215FB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A2908FB9-138F-4376-962E-D2582B5ACAEE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
"matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "F4F86C3C-B99C-44C6-97D7-163DC3F59687",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "6C3741B8-851F-475D-B428-523F4F722350",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"matchCriteriaId": "6B07BDE2-FE50-4C0E-9C73-6AA6C1D6C060",
"versionEndExcluding": "8.7.0-00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEB90C24-D252-4099-A7A1-9F8754DFB4A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "106FDF5A-D377-4E5F-8BF9-09290019C98A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"matchCriteriaId": "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"matchCriteriaId": "7B00DDE7-7002-45BE-8EDE-65D964922CB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"matchCriteriaId": "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"matchCriteriaId": "7DE847E0-431D-497D-9C57-C4E59749F6A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
"matchCriteriaId": "46385384-5561-40AA-9FDE-A2DE4FDFAD3E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
},
{
"lang": "es",
"value": "Una Vulnerabilidad en el componente Java SE, Java SE Embedded de Java SE de Oracle (subcomponente: Utilities). Las versiones compatibles que est\u00e1n afectadas son Java SE: 7u221, 8u212, 11.0.3 y 12.0.1; Java SE Embedded: versi\u00f3n 8u211. Una vulnerabilidad f\u00e1cilmente explotable permite a un atacante no autenticado con acceso a la red por medio de m\u00faltiples protocolos comprometer a Java SE, Java SE Embedded. Los ataques con \u00e9xito de esta vulnerabilidad pueden causar una capacidad no autorizada para causar una denegaci\u00f3n de servicio parcial (DOS parcial) de Java SE, Java SE Embedded. Nota: Esta vulnerabilidad se aplica a las implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox (en Java SE versi\u00f3n 8), que cargan y ejecutan c\u00f3digo no confiable (por ejemplo, c\u00f3digo que proviene de Internet) y conf\u00edan en el sandbox de Java por seguridad. Esta vulnerabilidad tambi\u00e9n se puede explotar mediante el uso de la API en el componente especificado, por ejemplo, por medio de un servicio web que proporciona datos a las API. CVSS 3.0 Puntuaci\u00f3n base 5.3 (impactos de disponibilidad). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
],
"id": "CVE-2019-2769",
"lastModified": "2024-11-21T04:41:31.510",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-07-23T23:15:40.287",
"references": [
{
"source": "secalert_us@oracle.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"source": "secalert_us@oracle.com",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4083-1/"
}
],
"sourceIdentifier": "secalert_us@oracle.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-PC8X-VQ86-P9H4
Vulnerability from github – Published: 2022-05-24 16:51 – Updated: 2022-05-24 16:51Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
{
"affected": [],
"aliases": [
"CVE-2019-2769"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-07-23T23:15:00Z",
"severity": "MODERATE"
},
"details": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GHSA-pc8x-vq86-p9h4",
"modified": "2022-05-24T16:51:12Z",
"published": "2022-05-24T16:51:12Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-2769"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"type": "WEB",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4080-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4083-1"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
}
]
}
GSD-2019-2769
Vulnerability from gsd - Updated: 2023-12-13 01:23{
"GSD": {
"alias": "CVE-2019-2769",
"description": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GSD-2019-2769",
"references": [
"https://www.suse.com/security/cve/CVE-2019-2769.html",
"https://www.debian.org/security/2019/dsa-4485",
"https://www.debian.org/security/2019/dsa-4486",
"https://access.redhat.com/errata/RHSA-2019:2737",
"https://access.redhat.com/errata/RHSA-2019:2592",
"https://access.redhat.com/errata/RHSA-2019:2590",
"https://access.redhat.com/errata/RHSA-2019:2585",
"https://access.redhat.com/errata/RHSA-2019:2495",
"https://access.redhat.com/errata/RHSA-2019:2494",
"https://access.redhat.com/errata/RHSA-2019:1840",
"https://access.redhat.com/errata/RHSA-2019:1839",
"https://access.redhat.com/errata/RHSA-2019:1817",
"https://access.redhat.com/errata/RHSA-2019:1816",
"https://access.redhat.com/errata/RHSA-2019:1815",
"https://access.redhat.com/errata/RHSA-2019:1811",
"https://access.redhat.com/errata/RHSA-2019:1810",
"https://ubuntu.com/security/CVE-2019-2769",
"https://advisories.mageia.org/CVE-2019-2769.html",
"https://alas.aws.amazon.com/cve/html/CVE-2019-2769.html",
"https://linux.oracle.com/cve/CVE-2019-2769.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-2769"
],
"details": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"id": "GSD-2019-2769",
"modified": "2023-12-13T01:23:45.797197Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2019-2769",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Java",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "Java SE: 7u221, 8u212, 11.0.3, 12.0.1"
},
{
"version_affected": "=",
"version_value": "Java SE Embedded: 8u211"
}
]
}
}
]
},
"vendor_name": "Oracle Corporation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded."
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "USN-4080-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "RHSA-2019:2494",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1916",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "openSUSE-SU-2019:1912",
"refsource": "SUSE",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"name": "RHSA-2019:2585",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300",
"refsource": "CONFIRM",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*",
"cpe_name": [],
"versionEndExcluding": "8.7.0-00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert_us@oracle.com",
"ID": "CVE-2019-2769"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"name": "USN-4080-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4080-1/"
},
{
"name": "USN-4083-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4083-1/"
},
{
"name": "RHSA-2019:2494",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2494"
},
{
"name": "RHSA-2019:2495",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2495"
},
{
"name": "openSUSE-SU-2019:1912",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html"
},
{
"name": "openSUSE-SU-2019:1916",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html"
},
{
"name": "[debian-lts-announce] 20190815 [SECURITY] [DLA 1886-1] openjdk-7 security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html"
},
{
"name": "RHSA-2019:2585",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2585"
},
{
"name": "RHSA-2019:2590",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2590"
},
{
"name": "RHSA-2019:2592",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2592"
},
{
"name": "RHSA-2019:2737",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2019:2737"
},
{
"name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10300"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03977en_us"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
},
"lastModifiedDate": "2022-10-06T18:47Z",
"publishedDate": "2019-07-23T23:15Z"
}
}
}
OPENSUSE-SU-2019:1912-1
Vulnerability from csaf_opensuse - Published: 2019-08-15 09:47 - Updated: 2019-08-15 09:47| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for java-1_8_0-openjdk",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).\n- CVE-2019-2762: Exceptional throw cases (bsc#1141782).\n- CVE-2019-2766: Improve file protocol handling (bsc#1141789).\n- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).\n- CVE-2019-2786: More limited privilege usage (bsc#1141787).\n- CVE-2019-2816: Normalize normalization (bsc#1141785).\n- CVE-2019-2842: Extended AES support (bsc#1141786).\n- CVE-2019-7317: Improve PNG support (bsc#1141780).\n- Certificate validation improvements\n\nNon-security issue fixed:\n\n- Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2019-1912",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_1912-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2019:1912-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLAA33SFC2BQWUMXROFQCWU3SJN2HD7O/#WLAA33SFC2BQWUMXROFQCWU3SJN2HD7O"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2019:1912-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WLAA33SFC2BQWUMXROFQCWU3SJN2HD7O/#WLAA33SFC2BQWUMXROFQCWU3SJN2HD7O"
},
{
"category": "self",
"summary": "SUSE Bug 1115375",
"url": "https://bugzilla.suse.com/1115375"
},
{
"category": "self",
"summary": "SUSE Bug 1141780",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "self",
"summary": "SUSE Bug 1141782",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "self",
"summary": "SUSE Bug 1141783",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "self",
"summary": "SUSE Bug 1141784",
"url": "https://bugzilla.suse.com/1141784"
},
{
"category": "self",
"summary": "SUSE Bug 1141785",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "self",
"summary": "SUSE Bug 1141786",
"url": "https://bugzilla.suse.com/1141786"
},
{
"category": "self",
"summary": "SUSE Bug 1141787",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "self",
"summary": "SUSE Bug 1141789",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2745 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2762 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2766 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2769 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2786 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2816 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2816/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-2842 page",
"url": "https://www.suse.com/security/cve/CVE-2019-2842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-7317 page",
"url": "https://www.suse.com/security/cve/CVE-2019-7317/"
}
],
"title": "Security update for java-1_8_0-openjdk",
"tracking": {
"current_release_date": "2019-08-15T09:47:11Z",
"generator": {
"date": "2019-08-15T09:47:11Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2019:1912-1",
"initial_release_date": "2019-08-15T09:47:11Z",
"revision_history": [
{
"date": "2019-08-15T09:47:11Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"product": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"product_id": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"product": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"product_id": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.0",
"product": {
"name": "openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.0"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.1",
"product": {
"name": "openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.0",
"product_id": "openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch"
},
"product_reference": "java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64 as component of openSUSE Leap 15.1",
"product_id": "openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
},
"product_reference": "java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-2745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2745"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2745",
"url": "https://www.suse.com/security/cve/CVE-2019-2745"
},
{
"category": "external",
"summary": "SUSE Bug 1141784 for CVE-2019-2745",
"url": "https://bugzilla.suse.com/1141784"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "moderate"
}
],
"title": "CVE-2019-2745"
},
{
"cve": "CVE-2019-2762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2762"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2762",
"url": "https://www.suse.com/security/cve/CVE-2019-2762"
},
{
"category": "external",
"summary": "SUSE Bug 1141782 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1141782"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2762",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "moderate"
}
],
"title": "CVE-2019-2762"
},
{
"cve": "CVE-2019-2766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2766"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2766",
"url": "https://www.suse.com/security/cve/CVE-2019-2766"
},
{
"category": "external",
"summary": "SUSE Bug 1141789 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1141789"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2766",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "low"
}
],
"title": "CVE-2019-2766"
},
{
"cve": "CVE-2019-2769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2769"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2769",
"url": "https://www.suse.com/security/cve/CVE-2019-2769"
},
{
"category": "external",
"summary": "SUSE Bug 1141783 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1141783"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2769",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "moderate"
}
],
"title": "CVE-2019-2769"
},
{
"cve": "CVE-2019-2786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2786"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2786",
"url": "https://www.suse.com/security/cve/CVE-2019-2786"
},
{
"category": "external",
"summary": "SUSE Bug 1141787 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1141787"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2786",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "low"
}
],
"title": "CVE-2019-2786"
},
{
"cve": "CVE-2019-2816",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2816"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2816",
"url": "https://www.suse.com/security/cve/CVE-2019-2816"
},
{
"category": "external",
"summary": "SUSE Bug 1141785 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1141785"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-2816",
"url": "https://bugzilla.suse.com/1147021"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "moderate"
}
],
"title": "CVE-2019-2816"
},
{
"cve": "CVE-2019-2842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-2842"
}
],
"notes": [
{
"category": "general",
"text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-2842",
"url": "https://www.suse.com/security/cve/CVE-2019-2842"
},
{
"category": "external",
"summary": "SUSE Bug 1141786 for CVE-2019-2842",
"url": "https://bugzilla.suse.com/1141786"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "low"
}
],
"title": "CVE-2019-2842"
},
{
"cve": "CVE-2019-7317",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-7317"
}
],
"notes": [
{
"category": "general",
"text": "png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-7317",
"url": "https://www.suse.com/security/cve/CVE-2019-7317"
},
{
"category": "external",
"summary": "SUSE Bug 1124211 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1124211"
},
{
"category": "external",
"summary": "SUSE Bug 1135824 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1135824"
},
{
"category": "external",
"summary": "SUSE Bug 1141780 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1141780"
},
{
"category": "external",
"summary": "SUSE Bug 1147021 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1147021"
},
{
"category": "external",
"summary": "SUSE Bug 1165297 for CVE-2019-7317",
"url": "https://bugzilla.suse.com/1165297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.0:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.0:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-accessibility-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-demo-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-devel-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-headless-1.8.0.222-lp151.2.3.1.x86_64",
"openSUSE Leap 15.1:java-1_8_0-openjdk-javadoc-1.8.0.222-lp151.2.3.1.noarch",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.i586",
"openSUSE Leap 15.1:java-1_8_0-openjdk-src-1.8.0.222-lp151.2.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2019-08-15T09:47:11Z",
"details": "low"
}
],
"title": "CVE-2019-7317"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.