rpm package
suse/java-1_8_0-openjdk&distro=SUSE OpenStack Cloud 8
pkg:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20OpenStack%20Cloud%208
Vulnerabilities (70)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-2590 | — | < 1.8.0.242-27.41.1 | 1.8.0.242-27.41.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with netw | ||
| CVE-2020-2583 | — | < 1.8.0.242-27.41.1 | 1.8.0.242-27.41.1 | Jan 15, 2020 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with | ||
| CVE-2019-2842 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful | ||
| CVE-2019-2816 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi | ||
| CVE-2019-2786 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with networ | ||
| CVE-2019-2769 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with | ||
| CVE-2019-2766 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi | ||
| CVE-2019-2762 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with | ||
| CVE-2019-2745 | — | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Jul 23, 2019 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes | ||
| CVE-2019-7317 | Med | 5.3 | < 1.8.0.222-27.35.2 | 1.8.0.222-27.35.2 | Feb 4, 2019 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. |
- CVE-2020-2590Jan 15, 2020affected < 1.8.0.242-27.41.1fixed 1.8.0.242-27.41.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with netw
- CVE-2020-2583Jan 15, 2020affected < 1.8.0.242-27.41.1fixed 1.8.0.242-27.41.1
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with
- CVE-2019-2842Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful
- CVE-2019-2816Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
- CVE-2019-2786Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with networ
- CVE-2019-2769Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
- CVE-2019-2766Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker wi
- CVE-2019-2762Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with
- CVE-2019-2745Jul 23, 2019affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes
- affected < 1.8.0.222-27.35.2fixed 1.8.0.222-27.35.2
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
Page 4 of 4