rpm package

suse/java-1_8_0-ibm&distro=SUSE OpenStack Cloud 7

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20OpenStack%20Cloud%207

Vulnerabilities (99)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2020-27221	Cri	9.8	< 1.8.0_sr6.25-30.81.1	1.8.0_sr6.25-30.81.1	Jan 21, 2021	In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803	Med	5.3	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798	Low	3.1	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796	Low	3.1	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792	Med	4.2	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14781	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779	Low	3.7	< 1.8.0_sr6.20-30.78.1	1.8.0_sr6.20-30.78.1	Oct 21, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639	Med	5.3	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621	Med	5.3	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593	Hig	7.4	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2020-14583	Hig	8.3	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-14581	Low	3.7	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi
CVE-2020-14579	Low	3.7	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14578	Low	3.7	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14577	Low	3.7	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14556	Med	4.8	< 1.8.0_sr6.15-30.72.1	1.8.0_sr6.15-30.72.1	Jul 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network ac
CVE-2020-2830	Med	5.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805	Hig	8.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803	Hig	8.3	< 1.8.0_sr6.10-30.69.1	1.8.0_sr6.10-30.69.1	Apr 15, 2020	Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network

CVE-2020-27221CriJan 21, 2021
affected < 1.8.0_sr6.25-30.81.1fixed 1.8.0_sr6.25-30.81.1
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding.
CVE-2020-14803MedOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Succe
CVE-2020-14798LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14797LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14796LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14792MedOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network a
CVE-2020-14781LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network acce
CVE-2020-14779LowOct 21, 2020
affected < 1.8.0_sr6.20-30.78.1fixed 1.8.0_sr6.20-30.78.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2019-17639MedJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefine
CVE-2020-14621MedJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network ac
CVE-2020-14593HigJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network acce
CVE-2020-14583HigJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with net
CVE-2020-14581LowJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access vi
CVE-2020-14579LowJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14578LowJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via
CVE-2020-14577LowJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-14556MedJul 15, 2020
affected < 1.8.0_sr6.15-30.72.1fixed 1.8.0_sr6.15-30.72.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network ac
CVE-2020-2830MedApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network
CVE-2020-2805HigApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network
CVE-2020-2803HigApr 15, 2020
affected < 1.8.0_sr6.10-30.69.1fixed 1.8.0_sr6.10-30.69.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network

Page 1 of 5