[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2020:4348 -- centos 6 java-1.8.0-openjdk

ID: oval:org.secpod.oval:def:205687Date: (C)2020-11-18   (M)2024-02-19
Class: PATCHFamily: unix




The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix: * OpenJDK: Credentials sent over unencrypted LDAP connection * OpenJDK: Certificate blacklist bypass via alternate certificate encodings * OpenJDK: Integer overflow leading to out-of-bounds access * OpenJDK: Incomplete check for invalid characters in URI to path conversion * OpenJDK: Race condition in NIO Buffer boundary checks * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces * OpenJDK: Missing permission check in path to URI conversion For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 6
Product:
java-1.8.0-openjdk
Reference:
CESA-2020:4348
CVE-2020-14779
CVE-2020-14781
CVE-2020-14782
CVE-2020-14792
CVE-2020-14796
CVE-2020-14797
CVE-2020-14803
CVE    7
CVE-2020-14797
CVE-2020-14782
CVE-2020-14796
CVE-2020-14781
...
CPE    2
cpe:/o:centos:centos:6
cpe:/a:oracle:java-1.8.0-openjdk

© SecPod Technologies