Red Hat Security AdvisoryRHSA-2020:3386
java-1.8.0-ibm security update
Released 2020-08-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux 8 Supplementary java-1.8.0-ibm-1:1.8.0.6.15-1.el8_2, java-1.8.0-ibm-demo-1:1.8.0.6.15-1.el8_2, java-1.8.0-ibm-devel-1:1.8.0.6.15-1.el8_2 +5
Fixes 10 records
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.0392 · Published 2020-07-15 · Partial fix
Priority LOW 39
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.03846 · Published 2020-07-15 · Partial fix
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04471 · Published 2020-07-15 · Partial fix
Priority LOW 37
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).
CVSS 3.1MEDIUM 6.8· Network · No auth · No interaction · EPSS 0.04299 · Published 2020-01-15 · Partial fix
Priority LOW 28
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.03022 · Published 2020-07-15 · Partial fix
Priority LOW 27
In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cau…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01504 · Published 2020-07-15 · Partial fix CWE-843
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04313 · Published 2020-07-15 · Partial fix
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04313 · Published 2020-07-15 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0338 · Published 2020-07-15 · Partial fix
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03161 · Published 2020-01-15 · Partial fix
THREATIST.IORead the docs