Lucene search

K
oraclelinuxOracleLinuxELSA-2024-4560
HistorySep 17, 2024 - 12:00 a.m.

java-1.8.0-openjdk security update

2024-09-1700:00:00
linux.oracle.com
1
java
openjdk
security update
cve-2024-21131
cve-2024-21138
cve-2024-21140
cve-2024-21144
cve-2024-21145
cve-2024-21147
bug fixes
unix

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

5.1

Confidence

High

[1:1.8.0.412.b08-1.0.1]

  • Fixes openjdk below given CVE issues
  • CVE-2024-21131 Improve-UTF8-String-supports
  • CVE-2024-21138 Better-symbol-storage
  • Fixes bad immediate dominator info openjdk bug8262017
  • Fixes malformed control flow openjdk bug8303466
  • CVE-2024-21140 Improved-loop-handling
  • CVE-2024-21144 Enhance-Pack-200-loading
  • CVE-2024-21145 Improve-2D-image-handling
  • CVE-2024-21147 Improve-array-management

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

5.1

Confidence

High