Oracle Java SE unspecified vulnerability in version 8u381 and earlier on Window
Reporter | Title | Published | Views | Family All 196 |
---|---|---|---|---|
![]() | CVE-2023-22067 | 18 Oct 202314:00 | – | redhatcve |
![]() | CVE-2023-22067 | 17 Oct 202300:00 | – | ubuntucve |
![]() | CVE-2023-22067 | 17 Oct 202321:02 | – | cvelist |
![]() | CVE-2023-22067 | 17 Oct 202322:15 | – | alpinelinux |
![]() | Buffer overflow | 17 Oct 202322:15 | – | prion |
![]() | Oracle Java SE Security Update (oct2023) 01 - Linux | 19 Oct 202300:00 | – | openvas |
![]() | Oracle OpenJDK Vulnerability (CVE-2023-22067) | 19 Oct 202300:00 | – | openvas |
![]() | CentOS: Security Advisory for java (CESA-2023:5761) | 5 Mar 202400:00 | – | openvas |
![]() | openSUSE: Security Advisory for java (SUSE-SU-2023:4506-1) | 4 Mar 202400:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2023:4506-1) | 22 Nov 202300:00 | – | openvas |
Source | Link |
---|---|
oracle | www.oracle.com/security-alerts/cpuoct2023.html |
# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.832602");
script_version("2023-10-20T16:09:12+0000");
script_cve_id("CVE-2023-22067");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:P/A:N");
script_tag(name:"last_modification", value:"2023-10-20 16:09:12 +0000 (Fri, 20 Oct 2023)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2023-10-18 01:28:00 +0000 (Wed, 18 Oct 2023)");
script_tag(name:"creation_date", value:"2023-10-19 12:44:03 +0530 (Thu, 19 Oct 2023)");
script_name("Oracle Java SE Security Update (oct2023) 01 - Windows");
script_tag(name:"summary", value:"Oracle Java SE is prone to an unspecified
vulnerability.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
on the target host.");
script_tag(name:"insight", value:"The flaw exists due to an unspecified vulnerability
in Oracle Java SE which can only be exploited by supplying data to APIs in the
specified Component without using Untrusted Java Web Start applications or Untrusted Java applets.");
script_tag(name:"impact", value:"Successful exploitation will allow remote
attacker to compromise Oracle Java SE. It can result in unauthorized update,
insert or delete access to some of Oracle Java SE accessible data.");
script_tag(name:"affected", value:"Oracle Java SE version 8u381 and earlier,
on Windows.");
script_tag(name:"solution", value:"The vendor has released updates. Please see the references for more information.");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"registry");
script_xref(name:"URL", value:"https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixJAVA");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2023 Greenbone AG");
script_family("General");
script_dependencies("gb_java_prdts_detect_portable_win.nasl");
script_mandatory_keys("Sun/Java/JDK_or_JRE/Win/installed");
exit(0);
}
include("host_details.inc");
include("version_func.inc");
CPE = "cpe:/a:oracle:jre";
if(!infos = get_app_version_and_location(cpe:CPE, exit_no_version:TRUE))
exit(0);
vers = infos["version"];
path = infos["location"];
if(version_in_range(version:vers, test_version:"1.8.0", test_version2:"1.8.0.381")) {
report = report_fixed_ver(installed_version:vers, fixed_version: "Apply patch provided by the vendor", install_path:path);
security_message(port:0, data:report);
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo