The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6661-1 advisory.

    Yi Yang discovered that the Hotspot component of OpenJDK 17 incorrectly handled array accesses in the C1     compiler. An attacker could possibly use this issue to cause a denial of service, execute arbitrary code     or bypass Java sandbox restrictions. (CVE-2024-20918)

    It was discovered that the Hotspot component of OpenJDK 17 did not properly verify bytecode in certain     situations. An attacker could possibly use this issue to bypass Java sandbox restrictions.
    (CVE-2024-20919)

    It was discovered that the Hotspot component of OpenJDK 17 had an optimization flaw when generating range     check loop predicates. An attacker could possibly use this issue to cause a denial of service, execute     arbitrary code or bypass Java sandbox restrictions. (CVE-2024-20921)

    Yakov Shafranovich discovered that OpenJDK 17 incorrectly handled ZIP archives that have file and     directory entries with the same name. An attacker could possibly use this issue to bypass Java sandbox     restrictions. (CVE-2024-20932)

    It was discovered that OpenJDK 17 could produce debug logs that contained private keys used for digital     signatures. An attacker could possibly use this issue to obtain sensitive information. (CVE-2024-20945)

    Hubert Kario discovered that the TLS implementation in OpenJDK 17 had a timing side-channel and     incorrectly handled RSA padding. A remote attacker could possibly use this issue to recover sensitive     information. (CVE-2024-20952)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : OpenJDK 17 vulnerabilities (USN-6661-1)

high Nessus Plugin ID 191043

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.2 Mar 11, 2024, 4:51 PM CVE (set "CVE" coverage to "CVE-2024-20918,CVE-2024-20919,CVE-2024-20921,CVE-2024-20932,CVE-2024-20945,CVE-2024-20952") CVSS metrics ("CVSSv2 score" set to 7.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N". "CVSSv3 score" set to 7.5. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2024-20932") Plugin metadata Plugin Feed: 202403111651
Version 1.1 Feb 29, 2024, 8:48 PM CVE (set "CVE" coverage to "") CVSS metrics ("CVSSv2 score" set to 0.0. "CVSSv2 vector" set to none. "CVSSv3 score" set to 0.0. "CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none. "CVSSv3 temporal vector" set to none) CVSSv2 score source (changed from "CVE-2024-20932" to none) CVSSv2 severity (based on None, severity decreased from "High" to "Low") CVSSv3 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202402292048
Version 1.0 Feb 27, 2024, 11:29 AM New Plugin Feed: 202402271129