rpm package

opensuse/java-11-openjdk&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Tumbleweed

Vulnerabilities (206)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2019-7317	Med	5.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Feb 4, 2019	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-2426	Low	3.7	< 11.0.12.0-3.1	11.0.12.0-3.1	Jan 16, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mult
CVE-2019-2422	Low	3.1	< 11.0.12.0-3.1	11.0.12.0-3.1	Jan 16, 2019	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multi
CVE-2018-3183	Cri	9.0	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated att
CVE-2018-3180	Med	5.6	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenti
CVE-2018-3169	Hig	8.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2018-3157	Low	3.7	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful a
CVE-2018-3150	Low	3.7	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful
CVE-2018-3149	Hig	8.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenti
CVE-2018-3139	Low	3.1	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with ne
CVE-2018-3136	Low	3.4	< 11.0.12.0-3.1	11.0.12.0-3.1	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2018-2973	Med	5.9	< 11.0.12.0-3.1	11.0.12.0-3.1	Jul 18, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2018-2972	Med	5.9	< 11.0.12.0-3.1	11.0.12.0-3.1	Jul 18, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2018-2952	Low	3.7	< 11.0.12.0-3.1	11.0.12.0-3.1	Jul 18, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows
CVE-2018-2940	Med	4.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Jul 18, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with n
CVE-2018-11212	Med	6.5	< 11.0.12.0-3.1	11.0.12.0-3.1	May 16, 2018	An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
CVE-2018-2826	Hig	8.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Apr 19, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf
CVE-2018-2825	Hig	8.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Apr 19, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf
CVE-2018-2814	Hig	8.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Apr 19, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
CVE-2018-2799	Med	5.3	< 11.0.12.0-3.1	11.0.12.0-3.1	Apr 19, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated att

CVE-2019-7317MedFeb 4, 2019
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-2426LowJan 16, 2019
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mult
CVE-2019-2422LowJan 16, 2019
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multi
CVE-2018-3183CriOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected are Java SE: 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenticated att
CVE-2018-3180MedOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenti
CVE-2018-3169HigOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2018-3157LowOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful a
CVE-2018-3150LowOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). The supported version that is affected is Java SE: 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful
CVE-2018-3149HigOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows unauthenti
CVE-2018-3139LowOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with ne
CVE-2018-3136LowOct 17, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2018-2973MedJul 18, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with netw
CVE-2018-2972MedJul 18, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). The supported version that is affected is Java SE: 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2018-2952LowJul 18, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows
CVE-2018-2940MedJul 18, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with n
CVE-2018-11212MedMay 16, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.
CVE-2018-2826HigApr 19, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf
CVE-2018-2825HigApr 19, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successf
CVE-2018-2814HigApr 19, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with netwo
CVE-2018-2799MedApr 19, 2018
affected < 11.0.12.0-3.1fixed 11.0.12.0-3.1
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated att

Page 10 of 11