rpm package
suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5
pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5
Vulnerabilities (153)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-17639 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine | ||
| CVE-2020-14621 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac | ||
| CVE-2020-14593 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce | ||
| CVE-2020-14583 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2020-14581 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi | ||
| CVE-2020-14579 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via | ||
| CVE-2020-14578 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via | ||
| CVE-2020-14577 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network | ||
| CVE-2020-14556 | — | < 1.8.0_sr6.15-30.72.1 | 1.8.0_sr6.15-30.72.1 | Jul 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network ac | ||
| CVE-2020-2830 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network | ||
| CVE-2020-2805 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network | ||
| CVE-2020-2803 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network | ||
| CVE-2020-2800 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke | ||
| CVE-2020-2781 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access | ||
| CVE-2020-2757 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2020-2756 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net | ||
| CVE-2020-2755 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access | ||
| CVE-2020-2754 | — | < 1.8.0_sr6.10-30.69.1 | 1.8.0_sr6.10-30.69.1 | Apr 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access | ||
| CVE-2019-4732 | — | < 1.8.0_sr6.5-30.63.1 | 1.8.0_sr6.5-30.63.1 | Feb 3, 2020 | IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows cl | ||
| CVE-2020-2659 | — | < 1.8.0_sr6.5-30.63.1 | 1.8.0_sr6.5-30.63.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via |
- CVE-2019-17639Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
- CVE-2020-14621Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
- CVE-2020-14593Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce
- CVE-2020-14583Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2020-14581Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi
- CVE-2020-14579Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
- CVE-2020-14578Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
- CVE-2020-14577Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network
- CVE-2020-14556Jul 15, 2020affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network ac
- CVE-2020-2830Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
- CVE-2020-2805Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
- CVE-2020-2803Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
- CVE-2020-2800Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacke
- CVE-2020-2781Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access
- CVE-2020-2757Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2020-2756Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with net
- CVE-2020-2755Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
- CVE-2020-2754Apr 15, 2020affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access
- CVE-2019-4732Feb 3, 2020affected < 1.8.0_sr6.5-30.63.1fixed 1.8.0_sr6.5-30.63.1
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows cl
- CVE-2020-2659Jan 15, 2020affected < 1.8.0_sr6.5-30.63.1fixed 1.8.0_sr6.5-30.63.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
Page 6 of 8