CVE-2019-2602

23.04.2019, 19:32

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 46%

Affected Products (NVD)

Vendor	Product	Version
oracle	jdk	1.7.0
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	11.0.2
oracle	jre	1.7.0
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	11.0.2
redhat	openshift_container_platform	3.11
redhat	satellite	5.8
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.1
redhat	enterprise_linux_eus	8.2
redhat	enterprise_linux_eus	8.4
redhat	enterprise_linux_eus	8.6
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	8.2
redhat	enterprise_linux_server_aus	8.4
redhat	enterprise_linux_server_aus	8.6
redhat	enterprise_linux_server_tus	8.2
redhat	enterprise_linux_server_tus	8.4
redhat	enterprise_linux_server_tus	8.6
redhat	enterprise_linux_workstation	6.0
redhat	enterprise_linux_workstation	7.0
opensuse	leap	15.0
opensuse	leap	42.3
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	18.10
canonical	ubuntu_linux	19.10
debian	debian_linux	8.0
debian	debian_linux	9.0
mcafee	epolicy_orchestrator	5.9.0
mcafee	epolicy_orchestrator	5.9.1
mcafee	epolicy_orchestrator	5.10.0
hp	xp7_command_view	𝑥 < 8.6.5-00

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

openjdk-11

bullseye	11.0.24+8-2~deb11u1 fixed
bullseye (security)	11.0.25+9-1~deb11u1 fixed
sid	11.0.25+9-1 fixed

openjdk-8

sid	8u432-b06-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

icedtea-web

bionic	not-affected
cosmic	not-affected
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
trusty	dne
xenial	not-affected

openjdk-12

bionic	dne
cosmic	dne
disco	ignored
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
trusty	dne
xenial	dne

openjdk-6

bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
trusty	dne
xenial	dne

openjdk-7

bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
trusty	dne
xenial	dne

openjdk-8

bionic	Fixed 8u212-b03-0ubuntu1.18.04.1 released
cosmic	Fixed 8u212-b03-0ubuntu1.18.10.1 released
disco	Fixed 8u212-b03-0ubuntu1.19.04.2 released
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
trusty	dne
xenial	Fixed 8u212-b03-0ubuntu1.16.04.1 released

openjdk-9

bionic	dne
cosmic	dne
disco	dne
eoan	dne
focal	dne
groovy	dne
hirsute	dne
impish	dne
jammy	dne
trusty	dne
xenial	not-affected

openjdk-lts

bionic	Fixed 11.0.3+7-1ubuntu2~18.04.1 released
cosmic	Fixed 11.0.3+7-1ubuntu2~18.10.1 released
disco	Fixed 11.0.3+7-1ubuntu2~19.04.1 released
eoan	not-affected
focal	not-affected
groovy	not-affected
hirsute	not-affected
impish	not-affected
jammy	not-affected
trusty	dne
xenial	dne

openSUSE / SLES Releases

openSUSE Product

Release

java-11-openjdk

suse enterprise desktop 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP7	11.0.3.0-3.21.2 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP7	11.0.3.0-3.21.2 fixed

java-11-openjdk-demo

suse enterprise desktop 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP7	11.0.3.0-3.21.2 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP7	11.0.3.0-3.21.2 fixed

java-11-openjdk-devel

suse enterprise desktop 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP7	11.0.3.0-3.21.2 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP7	11.0.3.0-3.21.2 fixed

java-11-openjdk-headless

suse enterprise desktop 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise desktop 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 12 SP5	11.0.4.0-1.26 fixed
suse enterprise sap 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise sap 15 SP7	11.0.3.0-3.21.2 fixed
suse enterprise server 12 SP5	11.0.4.0-1.26 fixed
suse enterprise server 15 SP1	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP2	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP3	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP4	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP5	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP6	11.0.3.0-3.21.2 fixed
suse enterprise server 15 SP7	11.0.3.0-3.21.2 fixed

java-1_7_0-openjdk

suse enterprise sap 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP2	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-demo

suse enterprise sap 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP2	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-devel

suse enterprise sap 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP2	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_7_0-openjdk-headless

suse enterprise sap 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise sap 12 SP5	1.7.0.231-43.27.2 fixed
suse enterprise server 12	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP1	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP2	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP3	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP4	1.7.0.221-43.22.1 fixed
suse enterprise server 12 SP5	1.7.0.231-43.27.2 fixed

java-1_8_0-openjdk

suse enterprise sap 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP7	1.8.0.212-3.19.1 fixed
suse enterprise server 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP2	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP7	1.8.0.212-3.19.1 fixed

java-1_8_0-openjdk-demo

suse enterprise sap 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP7	1.8.0.212-3.19.1 fixed
suse enterprise server 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP2	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP7	1.8.0.212-3.19.1 fixed

java-1_8_0-openjdk-devel

suse enterprise sap 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP7	1.8.0.212-3.19.1 fixed
suse enterprise server 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP2	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP7	1.8.0.212-3.19.1 fixed

java-1_8_0-openjdk-headless

suse enterprise sap 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise sap 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise sap 15	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise sap 15 SP7	1.8.0.212-3.19.1 fixed
suse enterprise server 12 SP1	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP2	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP3	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP4	1.8.0.212-27.32.1 fixed
suse enterprise server 12 SP5	1.8.0.222-27.35.2 fixed
suse enterprise server 15	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP1	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP2	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP3	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP4	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP5	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP6	1.8.0.212-3.19.1 fixed
suse enterprise server 15 SP7	1.8.0.212-3.19.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.7.0-openjdk

RHEL 6	1:1.7.0.221-2.6.18.0.el6_10 fixed
RHEL 7	1:1.7.0.221-2.6.18.0.el7_6 fixed

java-1.7.0-openjdk-accessibility

RHEL 7

1:1.7.0.221-2.6.18.0.el7_6

fixed

java-1.7.0-openjdk-demo

RHEL 6	1:1.7.0.221-2.6.18.0.el6_10 fixed
RHEL 7	1:1.7.0.221-2.6.18.0.el7_6 fixed

java-1.7.0-openjdk-devel

RHEL 6	1:1.7.0.221-2.6.18.0.el6_10 fixed
RHEL 7	1:1.7.0.221-2.6.18.0.el7_6 fixed

java-1.7.0-openjdk-headless

RHEL 7

1:1.7.0.221-2.6.18.0.el7_6

fixed

java-1.7.0-openjdk-javadoc

RHEL 6	1:1.7.0.221-2.6.18.0.el6_10 fixed
RHEL 7	1:1.7.0.221-2.6.18.0.el7_6 fixed

java-1.7.0-openjdk-src

RHEL 6	1:1.7.0.221-2.6.18.0.el6_10 fixed
RHEL 7	1:1.7.0.221-2.6.18.0.el7_6 fixed

java-1.7.1-ibm

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.7.1-ibm-demo

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.7.1-ibm-devel

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.7.1-ibm-jdbc

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.7.1-ibm-plugin

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.7.1-ibm-src

RHEL 6	1:1.7.1.4.45-1jpp.1.el6_10 fixed
RHEL 7	1:1.7.1.4.45-1jpp.1.el7 fixed

java-1.8.0-ibm

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-demo

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-devel

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-headless

RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-jdbc

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-plugin

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-src

RHEL 6	1:1.8.0.5.35-1jpp.1.el6_10 fixed
RHEL 7	1:1.8.0.5.35-1jpp.1.el7 fixed
RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-ibm-webstart

RHEL 8	1:1.8.0.5.35-3.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.5.35-3.el8_0 fixed

java-1.8.0-openjdk

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-accessibility

RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-accessibility-debug

RHEL 7

1:1.8.0.212.b04-0.el7_6

fixed

java-1.8.0-openjdk-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-1.8.0-openjdk-demo

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-demo-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-1.8.0-openjdk-devel

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-devel-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-1.8.0-openjdk-headless

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-headless-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-1.8.0-openjdk-javadoc

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-javadoc-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-1.8.0-openjdk-javadoc-zip

RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-javadoc-zip-debug

RHEL 7

1:1.8.0.212.b04-0.el7_6

fixed

java-1.8.0-openjdk-src

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed
RHEL 8	1:1.8.0.212.b04-1.el8_0 fixed
RHEL 8.0 E4S	1:1.8.0.212.b04-1.el8_0 fixed

java-1.8.0-openjdk-src-debug

RHEL 6	1:1.8.0.212.b04-0.el6_10 fixed
RHEL 7	1:1.8.0.212.b04-0.el7_6 fixed

java-11-openjdk

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-demo

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-demo-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-devel

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-devel-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-headless

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-headless-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-javadoc

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-javadoc-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-javadoc-zip

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-javadoc-zip-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-jmods

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-jmods-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

java-11-openjdk-src

RHEL 7	1:11.0.3.7-0.el7_6 fixed
RHEL 8	1:11.0.3.7-2.el8_0 fixed
RHEL 8.0 E4S	1:11.0.3.7-2.el8_0 fixed

java-11-openjdk-src-debug

RHEL 7

1:11.0.3.7-0.el7_6

fixed

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://access.redhat.com/errata/RHBA-2019:0959

https://access.redhat.com/errata/RHSA-2019:1146

https://access.redhat.com/errata/RHSA-2019:1163

https://access.redhat.com/errata/RHSA-2019:1164

https://access.redhat.com/errata/RHSA-2019:1165

https://access.redhat.com/errata/RHSA-2019:1166

https://access.redhat.com/errata/RHSA-2019:1238

https://access.redhat.com/errata/RHSA-2019:1325

https://access.redhat.com/errata/RHSA-2019:1518

https://kc.mcafee.com/corporate/index?page=content&id=SB10285

https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html

https://seclists.org/bugtraq/2019/May/75

https://security.gentoo.org/glsa/201908-10

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us

https://usn.ubuntu.com/3975-1/

https://www.debian.org/security/2019/dsa-4453

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://access.redhat.com/errata/RHBA-2019:0959

https://access.redhat.com/errata/RHSA-2019:1146

https://access.redhat.com/errata/RHSA-2019:1163

https://access.redhat.com/errata/RHSA-2019:1164

https://access.redhat.com/errata/RHSA-2019:1165

https://access.redhat.com/errata/RHSA-2019:1166

https://access.redhat.com/errata/RHSA-2019:1238

https://access.redhat.com/errata/RHSA-2019:1325

https://access.redhat.com/errata/RHSA-2019:1518

https://kc.mcafee.com/corporate/index?page=content&id=SB10285

https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html

https://seclists.org/bugtraq/2019/May/75

https://security.gentoo.org/glsa/201908-10

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us

https://usn.ubuntu.com/3975-1/

https://www.debian.org/security/2019/dsa-4453