Detections
Analytics
Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2024-482)
high Nessus Plugin ID 189196
Language:
Synopsis
The remote Amazon Linux 2023 host is missing a security update.Description
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-482 advisory.- 2024-05-03: The severity of this advisory has been changed from important to low. 2024-05-02:
CVE-2024-20918 was removed from this advisory. 2024-05-02: CVE-2024-20919 was removed from this advisory.
2024-05-02: CVE-2024-20921 was removed from this advisory. 2024-05-02: CVE-2024-20926 was removed from this advisory. 2024-05-02: CVE-2024-20945 was removed from this advisory. 2024-05-02: CVE-2024-20952 was removed from this advisory. (ALAS2023-2024-482)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Run 'dnf update java-1.8.0-amazon-corretto --releasever 2023.3.20240117' to update your system.See Also
Plugin Details
Severity: High
ID: 189196
File Name: al2023_ALAS2023-2024-482.nasl
Version: 1.1
Type: local
Agent: unix
Published: 1/18/2024
Updated: 5/3/2024
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Vulnerability Information
CPE: p-cpe:/a:amazon:linux:java-1.8.0-amazon-corretto, p-cpe:/a:amazon:linux:java-1.8.0-amazon-corretto-devel, cpe:/o:amazon:linux:2023
Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 1/17/2024
Vulnerability Publication Date: 1/16/2024