[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253562

 
 

909

 
 

197267

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2020:4307 -- centos 7 java-11-openjdk

ID: oval:org.secpod.oval:def:205673Date: (C)2020-11-10   (M)2024-02-19
Class: PATCHFamily: unix




The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix: * OpenJDK: Credentials sent over unencrypted LDAP connection * OpenJDK: Certificate blacklist bypass via alternate certificate encodings * OpenJDK: Integer overflow leading to out-of-bounds access * OpenJDK: Incomplete check for invalid characters in URI to path conversion * OpenJDK: Race condition in NIO Buffer boundary checks * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces * OpenJDK: Missing permission check in path to URI conversion For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

Platform:
CentOS 7
Product:
java-11-openjdk
Reference:
CESA-2020:4307
CVE-2020-14779
CVE-2020-14781
CVE-2020-14782
CVE-2020-14792
CVE-2020-14796
CVE-2020-14797
CVE-2020-14803
CVE    7
CVE-2020-14797
CVE-2020-14782
CVE-2020-14796
CVE-2020-14781
...

© SecPod Technologies