Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in cross-site scripting, denial of service, information disclosure or Kerberos user impersonation.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4223-1 advisory.

    Jan Jancar, Petr Svenda, and Vladimir Sedlacek discovered that a side- channel vulnerability existed in     the ECDSA implementation in OpenJDK. An Attacker could use this to expose sensitive information.
    (CVE-2019-2894)

    It was discovered that the Socket implementation in OpenJDK did not properly restrict the creation of     subclasses with a custom Socket implementation. An attacker could use this to specially create a Java     class that could possibly bypass Java sandbox restrictions. (CVE-2019-2945)

    Rob Hamm discovered that the Kerberos implementation in OpenJDK did not properly handle proxy credentials.
    An attacker could possibly use this to impersonate another user. (CVE-2019-2949)

    It was discovered that a NULL pointer dereference existed in the font handling implementation in OpenJDK.
    An attacker could use this to cause a denial of service (application crash). (CVE-2019-2962)

    It was discovered that the Concurrency subsystem in OpenJDK did not properly bound stack consumption when     compiling regular expressions. An attacker could use this to cause a denial of service (application     crash). (CVE-2019-2964)

    It was discovered that the JAXP subsystem in OpenJDK did not properly handle XPath expressions in some     situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2973,     CVE-2019-2981)

    It was discovered that the Nashorn JavaScript subcomponent in OpenJDK did not properly handle regular     expressions in some situations. An attacker could use this to cause a denial of service (application     crash). (CVE-2019-2975)

    It was discovered that the String class in OpenJDK contained an out-of- bounds access vulnerability. An     attacker could use this to cause a denial of service (application crash) or possibly expose sensitive     information. This issue only affected OpenJDK 11 in Ubuntu 18.04 LTS, Ubuntu 19.04, and Ubuntu 19.10.
    (CVE-2019-2977)

    It was discovered that the Jar URL handler in OpenJDK did not properly handled nested Jar URLs in some     situations. An attacker could use this to cause a denial of service (application crash). (CVE-2019-2978)

    It was discovered that the Serialization component of OpenJDK did not properly handle deserialization of     certain object attributes. An attacker could use this to cause a denial of service (application crash).
    (CVE-2019-2983)

    It was discovered that the FreetypeFontScaler class in OpenJDK did not properly validate dimensions of     glyph bitmap images read from font files. An attacker could specially craft a font file that could cause a     denial of service (application crash). (CVE-2019-2987)

    It was discovered that a buffer overflow existed in the SunGraphics2D class in OpenJDK. An attacker could     possibly use this to cause a denial of service (excessive memory consumption or application crash).
    (CVE-2019-2988)

    It was discovered that the Networking component in OpenJDK did not properly handle certain responses from     HTTP proxies. An attacker controlling a malicious HTTP proxy could possibly use this to inject content     into a proxied HTTP connection. (CVE-2019-2989)

    It was discovered that the font handling implementation in OpenJDK did not properly validate TrueType font     files in some situations. An attacker could specially craft a font file that could cause a denial of     service (excessive memory consumption). (CVE-2019-2992)

    It was discovered that the JavaDoc generator in OpenJDK did not properly filter out some HTML elements     properly, including documentation comments in Java source code. An attacker could possibly use this to     craft a Cross-Site Scripting attack. (CVE-2019-2999)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for java-1_8_0-ibm fixes the following issues :

Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]

  - Security fixes: CVE-2019-2933 CVE-2019-2945     CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2975     CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989     CVE-2019-2992 CVE-2019-2996 CVE-2019-2999 CVE-2019-2973     CVE-2019-2981 CVE-2019-17631

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0046 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR6.

    Security Fix(es):

    * OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting,     8223518) (CVE-2019-2975)

    * OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

    * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)     (CVE-2019-2989)

    * Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment) (CVE-2019-2996)

    * IBM JDK: Unrestricted access to diagnostic operations (CVE-2019-17631)

    * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

    * OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

    * OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency,     8222684) (CVE-2019-2964)

    * OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)     (CVE-2019-2973)

    * OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)     (CVE-2019-2981)

    * OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)     (CVE-2019-2983)

    * OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

    * OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

    * OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949)

* OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975)

* OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978)

* OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989)

* OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945)

* OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962)

* OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964)

* OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973)

* OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981)

* OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983)

* OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286) (CVE-2019-2987)

* OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988)

* OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992)

* OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

ID	Name	Product	Family	Published	Updated	Severity
134409	NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2020-0022)	Nessus	NewStart CGSL Local Security Checks	3/11/2020	1/14/2021	high
130134	Debian DSA-4546-1 : openjdk-11 - security update	Nessus	Debian Local Security Checks	10/22/2019	4/17/2024	medium
132240	Ubuntu 16.04 LTS / 18.04 LTS : OpenJDK vulnerabilities (USN-4223-1)	Nessus	Ubuntu Local Security Checks	12/18/2019	8/27/2024	medium
130178	CentOS 7 : java-1.8.0-openjdk (CESA-2019:3128)	Nessus	CentOS Local Security Checks	10/24/2019	5/18/2022	medium
132704	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0024-1)	Nessus	SuSE Local Security Checks	1/8/2020	4/1/2024	critical
132701	RHEL 8 : java-1.8.0-ibm (RHSA-2020:0046)	Nessus	Red Hat Local Security Checks	1/8/2020	11/7/2024	critical
130179	CentOS 6 : java-1.8.0-openjdk (CESA-2019:3136)	Nessus	CentOS Local Security Checks	10/24/2019	5/18/2022	medium

Detections

Analytics

Plugins Search

high

medium

medium

medium

critical

critical

medium