> Oracle Java SE 安全漏洞

Oracle Java SE 安全漏洞

CNNVD-ID编号	CNNVD-201910-932	CVE编号	CVE-2019-2999
发布时间	2019-10-15	更新时间	2020-08-03
漏洞类型	其他	漏洞来源	N/A
危险等级	中危	威胁类型	远程
厂商	N/A

漏洞介绍

Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。

Oracle Java SE中的Javadoc组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，影响数据的保密性和完整性。以下产品及版本受到影响：Oracle Java SE 7u231版本，8u221版本，11.0.4版本，13版本。

漏洞补丁

目前厂商已发布升级了Oracle Java SE 安全漏洞的补丁，Oracle Java SE 安全漏洞的补丁获取链接：

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

参考网址

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3134

来源:www.oracle.com

链接：http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3135

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3157

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3136

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3158

来源:DEBIAN

链接：https://www.debian.org/security/2019/dsa-4548

来源:DEBIAN

链接：https://www.debian.org/security/2019/dsa-4546

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2019/Oct/27

来源:CONFIRM

链接：https://security.netapp.com/advisory/ntap-20191017-0001/

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2019/Oct/31

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200001-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/2403783

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:3135

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193084-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1135354

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0046

来源:www.debian.org

链接：https://www.debian.org/security/2019/dsa-4546

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:4110

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:4109

来源:security.business.xerox.com

链接：https://security.business.xerox.com/wp-content/uploads/2019/11/cert_XRX19-029_FFPSv2_Win10_SecurityBulletin_Nov2019.pdf

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-131/index.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193238-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1126605

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/ hitachi-sec-2019-122/index.html

来源:www.us-cert.gov

链接：https://www.us-cert.gov/ics/advisories/icsa-19-346-01

来源:lists.debian.org

链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html

来源:usn.ubuntu.com

链接：https://usn.ubuntu.com/4223-1/

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-202014263-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4619/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-and-ibm-java-runtime-that-affect-ibm-intelligent-operations-center-products-october-2019/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1137496

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0040/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-performance-management-products-5/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4376/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-java-update/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-content-collector-for-email-content-collector-for-file-systems-content-collector-for-microsoft-sharepoint-and-content-collector-for/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-minus-cve-2019-2949-3/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affects-ibm-agile-lifecycle-manager/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-the-ibm-sdk-java-technology-edition-affects-ibm-performance-management-products-4/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0755/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0513/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0097/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-watson-machine-learning-service-is-impacted-by-security-vulnerabilities-in-openjdk-11/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0065/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4075.2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0545/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155715/Ubuntu-Security-Notice-USN-4223-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4582/

来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2019-2999

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-java/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-storediq-instascan-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-os-images-for-red-hat-linux-systems-oct2019-updates/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1127397

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1128321

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4504/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4702/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0855/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4665/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4564/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-in-ibm-java-sdk-oct-2019-and-jan-2020-cpu-affect-multiple-ibm-continuous-engineering-products-based-on-ibm-jazz-technology/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4596/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1138768

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-for-multiplatforms-oct-2019-cpu-cve-2019-2964-cve-2019-2989-2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.3883/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-java-vulnerabilities-affect-ibm-spectrum-protect-plus/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-content-classification/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-affects-ibm-tivoli-composite-application-manager-for-transactions-robotic-response-time/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/154900/Red-Hat-Security-Advisory-2019-3136-01.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-the-websphere-message-broker-v8/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155588/Red-Hat-Security-Advisory-2019-4115-01.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1136038

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155859/Red-Hat-Security-Advisory-2020-0046-01.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4759/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4678/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.3909/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1136914

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4343/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0531/

来源:www.oracle.com

链接：https://www.oracle.com/technetwork/security-advisory/cpuoct2019verbose-5072833.html

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155567/Red-Hat-Security-Advisory-2019-4109-01.html

来源:access.redhat.com

链接：https://access.redhat.com/security/cve/cve-2019-2999

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155815/Red-Hat-Security-Advisory-2020-0006-01.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-netcool-agile-service-manager-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-middleware-software-affect-ibm-cloud-pak-for-automation-2/

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201910-932