Lucene search

K

Oracle Java SE Security Update (oct2023) 01 - Windows

🗓️ 19 Oct 2023 00:00:00Reported by Copyright (C) 2023 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 14 Views

Oracle Java SE unspecified vulnerability in version 8u381 and earlier on Window

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
RedhatCVE
CVE-2023-22067
18 Oct 202314:00
redhatcve
UbuntuCve
CVE-2023-22067
17 Oct 202300:00
ubuntucve
Cvelist
CVE-2023-22067
17 Oct 202321:02
cvelist
AlpineLinux
CVE-2023-22067
17 Oct 202322:15
alpinelinux
Prion
Buffer overflow
17 Oct 202322:15
prion
OpenVAS
Oracle Java SE Security Update (oct2023) 01 - Linux
19 Oct 202300:00
openvas
OpenVAS
Oracle OpenJDK Vulnerability (CVE-2023-22067)
19 Oct 202300:00
openvas
OpenVAS
CentOS: Security Advisory for java (CESA-2023:5761)
5 Mar 202400:00
openvas
OpenVAS
openSUSE: Security Advisory for java (SUSE-SU-2023:4506-1)
4 Mar 202400:00
openvas
OpenVAS
SUSE: Security Advisory (SUSE-SU-2023:4506-1)
22 Nov 202300:00
openvas
Rows per page
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832602");
  script_version("2023-10-20T16:09:12+0000");
  script_cve_id("CVE-2023-22067");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:P/A:N");
  script_tag(name:"last_modification", value:"2023-10-20 16:09:12 +0000 (Fri, 20 Oct 2023)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-10-18 01:28:00 +0000 (Wed, 18 Oct 2023)");
  script_tag(name:"creation_date", value:"2023-10-19 12:44:03 +0530 (Thu, 19 Oct 2023)");
  script_name("Oracle Java SE Security Update (oct2023) 01 - Windows");

  script_tag(name:"summary", value:"Oracle Java SE is prone to an unspecified
  vulnerability.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"The flaw exists due to an unspecified vulnerability
  in Oracle Java SE which can only be exploited by supplying data to APIs in the
  specified Component without using Untrusted Java Web Start applications or Untrusted Java applets.");

  script_tag(name:"impact", value:"Successful exploitation will allow remote
  attacker to compromise Oracle Java SE. It can result in unauthorized update,
  insert or delete access to some of Oracle Java SE accessible data.");

  script_tag(name:"affected", value:"Oracle Java SE version 8u381 and earlier,
  on Windows.");

  script_tag(name:"solution", value:"The vendor has released updates. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"registry");
  script_xref(name:"URL", value:"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixJAVA");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("General");
  script_dependencies("gb_java_prdts_detect_portable_win.nasl");
  script_mandatory_keys("Sun/Java/JDK_or_JRE/Win/installed");
  exit(0);
}

include("host_details.inc");
include("version_func.inc");

CPE = "cpe:/a:oracle:jre";

if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
  exit(0);

vers = infos["version"];
path = infos["location"];

if(version_in_range(version:vers, test_version:"1.8.0", test_version2:"1.8.0.381")) {
  report = report_fixed_ver(installed_version:vers, fixed_version: "Apply patch provided by the vendor", install_path:path);
  security_message(port:0, data:report);
  exit(0);
}
exit(0);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
19 Oct 2023 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS35.3
EPSS0.001
14
.json
Report