OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)

OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)

libpng: png_image_free in png.c in libpng has a use-after-free because png_image_free_function is called under png_safe_execute.
(CVE-2019-7317)

OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)

OpenJDK: Insufficient permission checks for file:// URLs on Windows (Networking, 8213431) (CVE-2019-2766)

OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344) (

CVE-2019-2818)

OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)

OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745)

OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678) (CVE-2019-2821)

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745)

* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)

* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)

* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)

* OpenJDK: Incorrect handling of certificate status messages during TLS handshake (JSSE, 8222678) (CVE-2019-2821)

* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)

* OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344) (CVE-2019-2818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745)

* OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762)

* OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769)

* OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)

* OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)

* OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381) (CVE-2019-2786)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1840 advisory.

    [1:1.7.0.231-2.6.19.1.0.1]
    - Update DISTRO_NAME in specfile

    [1:1.7.0.231-2.6.19.1]
    - Add missing hyphen in tapset filename.
    - Resolves: rhbz#1724452

    [1:1.7.0.231-2.6.19.0]
    - Update tapset name in patch.
    - Resolves: rhbz#1724452

    [1:1.7.0.231-2.6.19.0]
    - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
    - Fix fsg.sh to fail if patching fails.
    - Resolves: rhbz#1724452

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3938:03 advisory.

    * OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)     (CVE-2019-2745)
      * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)     (CVE-2019-2762)
      * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)     (CVE-2019-2769)
      * OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
      * OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)
      * OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)     (CVE-2019-2786)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3939:04 advisory.

    * OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)     (CVE-2019-2745)
      * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)     (CVE-2019-2762)
      * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)     (CVE-2019-2769)
      * OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
      * OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)
      * OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)     (CVE-2019-2786)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3940:03 advisory.

    * OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)     (CVE-2019-2745)
      * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)     (CVE-2019-2762)
      * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)     (CVE-2019-2769)
      * OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816)
      * OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511) (CVE-2019-2842)
      * OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)     (CVE-2019-2786)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126958	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2019-1246)	Nessus	Amazon Linux Local Security Checks	2019/7/24	2025/2/25	medium
126989	CentOS 7 : java-11-openjdk (CESA-2019:1810)	Nessus	CentOS Local Security Checks	2019/7/25	2025/2/25	medium
126990	CentOS 6 : java-1.8.0-openjdk (CESA-2019:1811)	Nessus	CentOS Local Security Checks	2019/7/25	2022/5/19	medium
127031	Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2019-1840)	Nessus	Oracle Linux Local Security Checks	2019/7/25	2024/10/22	medium
288899	MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.222.b10-0.AXS4 (AXSA:2019-3938:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium
289012	MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.222.b10-0.el7 (AXSA:2019-3939:04)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium
289415	MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.231-2.6.19.1.AXS4 (AXSA:2019-3940:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium