Improper Access Control

OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit is vulnerable to improper access control. It does not correctly check the "type" and "method handle binding" involving Wrapper.convert...

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to sandbox restriction bypass. The attack exists due to incorrect MethodHandle lookups, allowing a remote attacker to bypass sandbox restrictions...

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit are vulnerable to sandbox restrictions bypass. The attack is due to the flaws in the font layout engine in the 2D component, allowing an attacker to trigger Java Virtual Machine memory corruption...

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to sandbox restrictions bypass. It is due to improper method-invocation restrictions by the MethodUtil trampoline class allowing remote attackers to bypass the Java sandbox...

Improper Access Control

OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit is vulnerable to improper access control. The attack exists because it does not perform sufficient class access checks when creating new instances using MBeanInstantiator...

Memory Corruption

These packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit is vulnerable to JPEGImageWriter state corruption when using native code, which triggers memory corruption...

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Software Development Kit is vulnerable to sandbox restriction bypass. JDBC driver manager could incorrectly call toString method in JDBC drivers, and the ConcurrentHashMap class could incorrectly call the defaultReadObject method. Using this...

Permission Check Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to permission check bypass. The attack is due to incorrect setter access check in MethodHandles.java, allowing an attacker to set value of a final field...

Memory Corruption

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to memory corruption. It is due to an insufficient "validation of images" in share/native/sun/awt/image/awtImageRep.c, possibly involving offsets, causing 2D component to not properly process certain images...

Improper Access Control

OpenJDK is vulnerable to improper access control. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. A remote attacker could affect confidentiality, integrity, and availability via unknown vectors related to 2D...

Improper Access Control

OpenJDK is vulnerable to improper access control. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. Remote attackers could affect confidentiality, integrity and availability via unknown vectors related to 2D...

Improper Access Control

OpenJDK is vulnerable to improper access control vulnerability. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. A local user could affect the confidentiality via vector related JAX-WS...

Improper Access Control

OpenJDK is vulnerable to improper access control. Vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. An attacker can exploit this issue to execute arbitrary code in the context of the current user to affect confidentiality, integrity, and availability via unknow...

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2019-1301)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenJDK: Font layout engine out of bounds access setCurrGlyphIDCVE-2019-2698 - OpenJDK: Slow conversion of BigDecimal to...

EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2019-1300)

According to the version of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenJDK: memory disclosure in FileChannelImpl. CVE-2019-2422 Note that Tenable Network Security has extracted the preceding description...

EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2019-1299)

According to the version of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2019:1052-1)

This update for java-11-openjdk to version 11.0.3+7 fixes the following issues : Security issues fixed : CVE-2019-2602: Fixed excessive use of CPU time in the BigDecimal implementation bsc1132728. CVE-2019-2684: Fixed a flaw in the RMI registry implementation which could lead to selection of an...

CentOS Update for java CESA-2019:0790 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for java CESA-2019:0791 centos7

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : java-1.7.0-openjdk (CESA-2019:0791)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...