Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240801-02
HistoryAug 01, 2024 - 12:00 a.m.

ROS-20240801-02

2024-08-0100:00:00
redos.red-soft.ru
8
java se
oracle graalvm
jsse
corba
vulnerability
denial of service
unauthorized access
input validation
data modification
remote attacker

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

31.4%

JSON

A vulnerability in the JSSE component of the Java SE software platform and Oracle GraalVM for JDK virtual machine
is related to errors in certificate authentication procedure. Exploitation of the vulnerability could
Allow a remote attacker to cause a denial of service

A vulnerability in the CORBA component of Oracle Java SE software platforms is related to insufficient validation of input data.
of input data. Exploitation of the vulnerability could allow an attacker acting remotely to gain
access to read, modify, add, or delete data

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64java-1.8.0-openjdk< 1.8.0.402.b06-1UNKNOWN

Related

nessus 54
debian 2
amazon 3
centos 2
ibm 55
openvas 19
oraclelinux 6
redhat 22
f5 1
osv 8
mageia 1
almalinux 4
aix 1
kaspersky 1
ubuntu 1
alpinelinux 2
cvelist 2
redhatcve 2
ubuntucve 2
prion 2
cve 2
debiancve 2
veracode 2
nvd 2
rocky 1
nessus
nessus
Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2023-008)
2023-10-20 00:00:00
Debian DSA-5537-1 : openjdk-11 - security update
2023-10-27 00:00:00
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2024-1904)
2024-01-09 00:00:00
debian
debian
[SECURITY] [DSA 5537-1] openjdk-11 security update
2023-10-27 16:12:53
[SECURITY] [DLA 3636-1] openjdk-11 security update
2023-10-29 08:16:42
amazon
amazon
Medium: java-1.8.0-openjdk
2024-01-03 21:04:00
Medium: java-1.8.0-openjdk
2024-01-03 22:37:00
Medium: java-11-amazon-corretto
2023-10-18 02:27:00
centos
centos
java security update
2024-01-12 19:19:48
java security update
2024-01-12 19:19:02
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
2024-02-14 11:54:31
Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester
2024-01-02 18:15:49
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX
2023-12-18 16:25:48
openvas
openvas
CentOS: Security Advisory for java (CESA-2023:5761)
2024-03-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4506-1)
2023-11-22 00:00:00
openSUSE: Security Advisory for java (SUSE-SU-2023:4506-1)
2024-03-04 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2023-10-19 00:00:00
java-1.8.0-openjdk security update
2023-11-02 00:00:00
java-1.8.0-openjdk security update
2023-11-02 00:00:00
redhat
redhat
(RHSA-2023:5761) Moderate: java-1.8.0-openjdk security update
2023-10-18 21:48:51
(RHSA-2023:5726) Moderate: OpenJDK 8u392 Windows Security Update
2023-10-18 15:41:13
(RHSA-2023:5728) Moderate: java-1.8.0-openjdk security update
2023-10-18 22:06:54
f5
f5
K000138103 : Oracle Java SE vulnerabilities CVE-2023-22067 and CVE-2023-22081
2024-01-02 00:00:00
osv
osv
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
openjdk-8 vulnerabilities
2023-11-29 23:00:14
mageia
mageia
Updated java openjdk packages fix security vulnerabilities
2023-11-28 03:11:29
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
Moderate: java-11-openjdk security and bug fix update
2023-10-18 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2023-12-18 09:27:21
kaspersky
kaspersky
KLA61443 Multiple vulnerabilities in Oracle Java SE and GraalVM
2023-10-17 00:00:00
ubuntu
ubuntu
OpenJDK 8 vulnerabilities
2023-11-29 00:00:00
alpinelinux
alpinelinux
CVE-2023-22067
2023-10-17 22:15:12
CVE-2023-22081
2023-10-17 22:15:13
cvelist
cvelist
CVE-2023-22067
2023-10-17 21:02:50
CVE-2023-22081
2023-10-17 21:02:56
redhatcve
redhatcve
CVE-2023-22067
2023-10-18 14:00:43
CVE-2023-22081
2023-10-18 14:00:48
ubuntucve
ubuntucve
CVE-2023-22067
2023-10-17 00:00:00
CVE-2023-22081
2023-10-17 00:00:00
prion
prion
Buffer overflow
2023-10-17 22:15:00
Buffer overflow
2023-10-17 22:15:00
cve
cve
CVE-2023-22067
2023-10-17 22:15:12
CVE-2023-22081
2023-10-17 22:15:13
debiancve
debiancve
CVE-2023-22067
2023-10-17 22:15:12
CVE-2023-22081
2023-10-17 22:15:13
veracode
veracode
Improper Access Control
2023-11-30 20:28:14
Denial Of Service (DoS)
2023-11-30 20:33:47
nvd
nvd
CVE-2023-22067
2023-10-17 22:15:12
CVE-2023-22081
2023-10-17 22:15:13
rocky
rocky
java-11-openjdk security and bug fix update
2023-10-24 18:36:24

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

31.4%

JSON
Related for ROS-20240801-02
nessus54debian2amazon3centos2ibm55openvas19oraclelinux6redhat22f51osv8mageia1almalinux4aix1kaspersky1ubuntu1alpinelinux2cvelist2redhatcve2ubuntucve2prion2cve2debiancve2veracode2nvd2rocky1