Lucene search
Copyright (C) 2024 Greenbone AGOPENVAS:1361412562310856178HistoryJun 05, 2024 - 12:00 a.m.
openSUSE: Security Advisory for java (SUSE-SU-2024:1793-1)
2024-06-0500:00:00
Copyright (C) 2024 Greenbone AG
plugins.openvas.org
suse-su-2024:1793-1
opensuse leap 15.5
opensuse leap 15.6
cve-2024-21094
update
openjdk
security_fix
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
5.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.8%
The remote host is missing an update for the
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.856178");
script_version("2024-06-07T15:38:39+0000");
script_cve_id("CVE-2024-21011", "CVE-2024-21068", "CVE-2024-21085", "CVE-2024-21094");
script_tag(name:"cvss_base", value:"2.6");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:H/Au:N/C:N/I:P/A:N");
script_tag(name:"last_modification", value:"2024-06-07 15:38:39 +0000 (Fri, 07 Jun 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-04-16 22:15:29 +0000 (Tue, 16 Apr 2024)");
script_tag(name:"creation_date", value:"2024-06-05 01:00:45 +0000 (Wed, 05 Jun 2024)");
script_name("openSUSE: Security Advisory for java (SUSE-SU-2024:1793-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=(openSUSELeap15\.6|openSUSELeap15\.5)");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2024:1793-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/V4EQAQE4AT4H62CTUKIIW2NXQSRR3HHA");
script_tag(name:"summary", value:"The remote host is missing an update for the 'java'
package(s) announced via the SUSE-SU-2024:1793-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"This update for java-1_8_0-openj9 fixes the following issues:
Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual machine:
* CVE-2024-21094: Fixed C2 compilation failure with 'Exceeded _node_regs
array' (bsc#1222986).
* CVE-2024-21011: Fixed long Exception message leading to crash (bsc#1222979).
* CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984).
* CVE-2024-21068: Fixed integer overflow in C1 compiler address generation
(bsc#1222983).
##");
script_tag(name:"affected", value:"'java' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.6") {
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless-debuginfo", rpm:"java-1_8_0-openj9-headless-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debuginfo", rpm:"java-1_8_0-openj9-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel", rpm:"java-1_8_0-openj9-devel~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo-debuginfo", rpm:"java-1_8_0-openj9-demo-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo", rpm:"java-1_8_0-openj9-demo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debugsource", rpm:"java-1_8_0-openj9-debugsource~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-src", rpm:"java-1_8_0-openj9-src~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9", rpm:"java-1_8_0-openj9~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-accessibility", rpm:"java-1_8_0-openj9-accessibility~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless", rpm:"java-1_8_0-openj9-headless~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel-debuginfo", rpm:"java-1_8_0-openj9-devel-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-javadoc", rpm:"java-1_8_0-openj9-javadoc~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless-debuginfo", rpm:"java-1_8_0-openj9-headless-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debuginfo", rpm:"java-1_8_0-openj9-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel", rpm:"java-1_8_0-openj9-devel~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo-debuginfo", rpm:"java-1_8_0-openj9-demo-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo", rpm:"java-1_8_0-openj9-demo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debugsource", rpm:"java-1_8_0-openj9-debugsource~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-src", rpm:"java-1_8_0-openj9-src~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9", rpm:"java-1_8_0-openj9~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-accessibility", rpm:"java-1_8_0-openj9-accessibility~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless", rpm:"java-1_8_0-openj9-headless~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel-debuginfo", rpm:"java-1_8_0-openj9-devel-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-javadoc", rpm:"java-1_8_0-openj9-javadoc~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.6"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
if(release == "openSUSELeap15.5") {
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless-debuginfo", rpm:"java-1_8_0-openj9-headless-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debuginfo", rpm:"java-1_8_0-openj9-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel", rpm:"java-1_8_0-openj9-devel~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo-debuginfo", rpm:"java-1_8_0-openj9-demo-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo", rpm:"java-1_8_0-openj9-demo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debugsource", rpm:"java-1_8_0-openj9-debugsource~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-src", rpm:"java-1_8_0-openj9-src~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9", rpm:"java-1_8_0-openj9~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-accessibility", rpm:"java-1_8_0-openj9-accessibility~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless", rpm:"java-1_8_0-openj9-headless~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel-debuginfo", rpm:"java-1_8_0-openj9-devel-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-javadoc", rpm:"java-1_8_0-openj9-javadoc~1.8.0.412~150200.3.45.2##", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless-debuginfo", rpm:"java-1_8_0-openj9-headless-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debuginfo", rpm:"java-1_8_0-openj9-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel", rpm:"java-1_8_0-openj9-devel~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo-debuginfo", rpm:"java-1_8_0-openj9-demo-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-demo", rpm:"java-1_8_0-openj9-demo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-debugsource", rpm:"java-1_8_0-openj9-debugsource~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-src", rpm:"java-1_8_0-openj9-src~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9", rpm:"java-1_8_0-openj9~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-accessibility", rpm:"java-1_8_0-openj9-accessibility~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-headless", rpm:"java-1_8_0-openj9-headless~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-devel-debuginfo", rpm:"java-1_8_0-openj9-devel-debuginfo~1.8.0.412~150200.3.45.2", rls:"openSUSELeap15.5"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"java-1_8_0-openj9-javadoc", rpm:"java-1_8_0-openj9-javadoc~1.8.0.412~150200.3.45.2##", rls:"openSUSELeap15.5"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);Related
nessus
nessus
AlmaLinux 8 / 9 : java-1.8.0-openjdk (ALSA-2024:1818)
2024-04-19 00:00:00
RHEL 7 : java-1.8.0-openjdk (RHSA-2024:1817)
2024-04-17 00:00:00
SUSE SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2024:1450-1)
2024-04-29 00:00:00
osv
osv
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2024-05-06 13:04:21
openjdk-8 vulnerabilities
2024-06-06 01:46:19
openvas
openvas
Ubuntu: Security Advisory (USN-6810-1)
2024-06-07 00:00:00
openSUSE: Security Advisory for java (SUSE-SU-2024:1451-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1450-1)
2024-05-07 00:00:00
redhat
redhat
(RHSA-2024:1815) Moderate: OpenJDK 8u412 Security Update for Portable Linux Builds
2024-04-17 11:38:38
(RHSA-2024:1817) Moderate: java-1.8.0-openjdk security update
2024-04-16 21:02:40
(RHSA-2024:1816) Moderate: OpenJDK 8u412 Windows Security Update
2024-04-17 11:38:35
rocky
rocky
java-1.8.0-openjdk security update
2024-05-06 13:04:21
java-11-openjdk security update
2024-05-06 13:04:21
java-21-openjdk security update
2024-05-06 13:04:21
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2024-04-23 00:00:00
java-1.8.0-openjdk security update
2024-04-17 00:00:00
java-11-openjdk security update
2024-04-22 00:00:00
ubuntu
ubuntu
OpenJDK 8 vulnerabilities
2024-06-06 00:00:00
OpenJDK 11 vulnerabilities
2024-06-06 00:00:00
OpenJDK 17 vulnerabilities
2024-06-06 00:00:00
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
Moderate: java-17-openjdk security update
2024-04-18 00:00:00
amazon
amazon
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-17-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
f5
f5
debian
debian
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
[SECURITY] [DSA 5672-1] openjdk-17 security update
2024-04-22 14:23:20
mageia
mageia
ibm
ibm
cve
cve
cgr
cgr
CVE-2024-21085 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21094 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21068 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-21085
2024-04-16 21:26:27
nvd
nvd
kaspersky
kaspersky
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-04-16 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
cvelist
cvelist
alpinelinux
alpinelinux
wolfi
wolfi
CVE-2024-21068 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21085 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21011 vulnerabilities
2024-06-29 09:08:33
redhatcve
redhatcve
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 15:10:30
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
5.1 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.8%
Related for OPENVAS:1361412562310856178