The vulnerability of the Networking component of Oracle Java SE and Oracle Java SE Embedded software components allows attackers to cause partial service interruptions.

🗓️ 04 Nov 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

Networking flaw in Oracle Java SE and Embedded enables exploitation of archive processing causing disruptions.

Reporter	Title	Published	Views	Family All 324
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2019 through July 2022 affects AIX LPARs in IBM PureData System for Operational Analytics	4 Nov 202220:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Content Collector for SAP Applications	17 Feb 202008:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2019 - Includes Oracle Oct 2019 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time	28 Jul 202015:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Operational Decision Manager (October 2019, January 2020 and April 2020 CPUs)	17 Jun 202013:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cloud Transformation Advisor	17 Dec 201915:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM StoredIQ	10 Jul 202014:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium	7 Oct 202016:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Planning	8 Jan 202017:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affects IBM Agile Lifecycle Manager	2 Apr 202014:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in middleware software affect IBM Cloud Pak for Automation	27 Jun 202009:38	–	ibm

Vulners

Node

OR

oracle java_seMatch7u231

oracle java_seMatch8u221

oracle java_seMatch11.0.4

oracle java_seMatch13

oracle java_se_embeddedMatch8u221

oracle openjdkRange11.0.0–11.50.2

oracle openjdkRange7.3≥

oracle openjdkRange9.5≥

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

Source	Link
oracle	www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
oracle	www.oracle.com/security-alerts/cpuoct2019verbose.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
debian	www.debian.org/security/2019/dsa-4546
debian	www.debian.org/security/2019/dsa-4548
linuxsecurity	www.linuxsecurity.com/advisories/mageia/mageia-2019-0302-java-1-8-0-openjdk-security-update-19-07-54
advisories	www.advisories.mageia.org/MGASA-2019-0302.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-2978
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-2978

21 Nov 2023 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 33.7

CVSS 24.3

EPSS0.03284

networking vulnerability oracle java se archive processing remote exploitation disruptions