> Oracle Java SE 安全漏洞

Oracle Java SE 安全漏洞

CNNVD-ID编号	CNNVD-201910-946	CVE编号	CVE-2019-2964
发布时间	2019-10-15	更新时间	2020-12-02
漏洞类型	其他	漏洞来源	N/A
危险等级	低危	威胁类型	远程
厂商	N/A

漏洞介绍

Oracle Java SE和Oracle Java SE Embedded都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。

Oracle Java SE和Java SE Embedded中的Concurrency组件存在安全漏洞。攻击者可利用该漏洞造成拒绝服务，影响数据的可用性。以下产品及版本受到影响：Oracle Java SE 7u231版本，8u221版本，11.0.4版本，13版本；Java SE Embedded 8u221版本。

漏洞补丁

目前厂商已发布升级了Oracle Java SE 安全漏洞的补丁，Oracle Java SE 安全漏洞的补丁获取链接：

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

参考网址

来源:UBUNTU

链接：https://usn.ubuntu.com/4223-1/

来源:DEBIAN

链接：https://www.debian.org/security/2019/dsa-4548

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html

来源:DEBIAN

链接：https://www.debian.org/security/2019/dsa-4546

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2019/Oct/27

来源:CONFIRM

链接：https://security.netapp.com/advisory/ntap-20191017-0001/

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2019/Oct/31

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:4109

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3134

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:4113

来源:www.oracle.com

链接：http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3135

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3157

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3136

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:3158

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:4115

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2019:4110

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0006

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0046

来源:MLIST

链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200001-1.html

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:3135

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193084-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1135354

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0046

来源:www.debian.org

链接：https://www.debian.org/security/2019/dsa-4546

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:4110

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2019:4109

来源:security.business.xerox.com

链接：https://security.business.xerox.com/wp-content/uploads/2019/11/cert_XRX19-029_FFPSv2_Win10_SecurityBulletin_Nov2019.pdf

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-131/index.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193238-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1126605

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1138240

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/ hitachi-sec-2019-122/index.html

来源:www.us-cert.gov

链接：https://www.us-cert.gov/ics/advisories/icsa-19-346-01

来源:lists.debian.org

链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html

来源:usn.ubuntu.com

链接：https://usn.ubuntu.com/4223-1/

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-202014263-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4619/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-java-quarterly-cpu-affecting-watson-knowledge-catalog-for-ibm-cloud-pak-for-data/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-and-ibm-java-runtime-that-affect-ibm-intelligent-operations-center-products-october-2019/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1137496

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0040/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-performance-management-products-5/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4376/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-java-vulnerabilities-affect-ibm-san-volume-controller-ibm-storwize-ibm-spectrum-virtualize-and-ibm-flashsystem-products/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-application-manager-oct-2019-cpu-cve-2019-2964cve-2019-2978cve-2019-2983cve-2019-2989/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-java-affect-the-ibm-flashsystem-900-cve-2019-2989-and-cve-2019-2964/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-is-affected-by-multiple-vulnerabilities-in-ibm-java-runtime/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-java-update/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-content-collector-for-email-content-collector-for-file-systems-content-collector-for-microsoft-sharepoint-and-content-collector-for/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-minus-cve-2019-2949-3/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affects-ibm-agile-lifecycle-manager/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-the-ibm-sdk-java-technology-edition-affects-ibm-performance-management-products-4/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.1307/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0755/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0097/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-watson-machine-learning-service-is-impacted-by-security-vulnerabilities-in-openjdk-11/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0065/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4075.2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0545/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155715/Ubuntu-Security-Notice-USN-4223-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4582/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-java/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerabilitiy-in-ibm-java-sdk-affects-ibm-application-delivery-intelligence-v5-1-0-cve-2019-2964/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-storediq-instascan-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-ibm-java-runtime-affect-financial-transaction-manager-for-corporate-payment-services/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1127397

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1128321

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4504/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4702/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibmjava-sdk-affect-ibm-cloud-app-management/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-java-affect-the-ibm-flashsystem-900-cve-2019-2989-and-cve-2019-2964-2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0855/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4665/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4564/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-ibm-java-runtime-affect-financial-transaction-manager-for-corporate-payment-services-v2-1-1/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4782/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-in-ibm-java-sdk-oct-2019-and-jan-2020-cpu-affect-multiple-ibm-continuous-engineering-products-based-on-ibm-jazz-technology/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4596/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1138768

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-for-multiplatforms-oct-2019-cpu-cve-2019-2964-cve-2019-2989-2/

来源:access.redhat.com

链接：https://access.redhat.com/security/cve/cve-2019-2964

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.3883/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1169902

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-java-sdk-that-affect-ibm-security-directory-suite-october-2019-cpu/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-java-vulnerabilities-affect-ibm-spectrum-protect-plus/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1142626

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-content-classification/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-affects-ibm-tivoli-composite-application-manager-for-transactions-robotic-response-time/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/154900/Red-Hat-Security-Advisory-2019-3136-01.html

来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2019-2964

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-the-websphere-message-broker-v8/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.4251/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155588/Red-Hat-Security-Advisory-2019-4115-01.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1136038

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155859/Red-Hat-Security-Advisory-2020-0046-01.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4759/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4678/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.3909/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4343/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1134897

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0531/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-planning-analytics-has-addressed-multiple-security-vulnerabilities/

来源:www.oracle.com

链接：https://www.oracle.com/technetwork/security-advisory/cpuoct2019verbose-5072833.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-for-multiplatforms-oct-2019-cpu-cve-2019-2964-cve-2019-2989-3/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155567/Red-Hat-Security-Advisory-2019-4109-01.html

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155815/Red-Hat-Security-Advisory-2020-0006-01.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-and-ibm-java-runtime-affect-rational-business-developer/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-netcool-agile-service-manager-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-for-multiplatforms-oct-2019-cpu-cve-2019-2964-cve-2019-2989/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-middleware-software-affect-ibm-cloud-pak-for-automation-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-monitoring/

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201910-946