> Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞

Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞

CNNVD-ID编号	CNNVD-201910-1012	CVE编号	CVE-2019-2933
发布时间	2019-10-15	更新时间	2020-08-25
漏洞类型	信息泄露	漏洞来源	N/A
危险等级	低危	威胁类型	远程
厂商	N/A

漏洞介绍

Oracle Java SE和Oracle Java SE Embedded都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。

Oracle Java SE和Java SE Embedded中的Libraries组件存在安全漏洞。攻击者可利用该漏洞未授权读取数据，影响数据的保密性。以下产品及版本受到影响：Oracle Java SE 7u231版本，8u221版本，11.0.4版本，13版本；Java SE Embedded 8u221版本。

漏洞补丁

目前厂商已发布升级了Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞的补丁，Oracle Java SE和Oracle Java SE Embedded 信息泄露漏洞的补丁获取链接：

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

参考网址

来源:www.oracle.com

链接：http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html

来源:CONFIRM

链接：https://kc.mcafee.com/corporate/index?page=content&id=SB10315

来源:CONFIRM

链接：https://security.netapp.com/advisory/ntap-20191017-0001/

来源:MLIST

链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200001-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193084-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1135354

来源:security.business.xerox.com

链接：https://security.business.xerox.com/wp-content/uploads/2019/11/cert_XRX19-029_FFPSv2_Win10_SecurityBulletin_Nov2019.pdf

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-131/index.html

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-123/index.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200025-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20193238-1.html

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1126605

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1138240

来源:www.hitachi.co.jp

链接：http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/ hitachi-sec-2019-122/index.html

来源:www.us-cert.gov

链接：https://www.us-cert.gov/ics/advisories/icsa-19-346-01

来源:lists.debian.org

链接：https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200051-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-202014263-1.html

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2019/suse-su-20192998-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4619/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-ediscovery-analyzer/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-and-ibm-java-runtime-that-affect-ibm-intelligent-operations-center-products-october-2019/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0060/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1137496

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0040/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-performance-management-products-5/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4376/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4076/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-java-update/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-minus-cve-2019-2949-3/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affects-ibm-agile-lifecycle-manager/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-the-ibm-sdk-java-technology-edition-affects-ibm-performance-management-products-4/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0755/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0097/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-watson-machine-learning-service-is-impacted-by-security-vulnerabilities-in-openjdk-11/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4075.2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0545/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4582/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-java/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-storediq-instascan-2/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.1698/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-os-images-for-red-hat-linux-systems-oct2019-updates/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1127397

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1128321

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4504/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0855/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4665/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4782/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-in-ibm-java-sdk-oct-2019-and-jan-2020-cpu-affect-multiple-ibm-continuous-engineering-products-based-on-ibm-jazz-technology/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4596/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1138768

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-system-automation-for-multiplatforms-oct-2019-cpu-cve-2019-2964-cve-2019-2989-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-java-vulnerabilities-affect-ibm-spectrum-protect-plus/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-content-classification/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oct-2019-includes-oracle-oct-2019-cpu-affects-ibm-tivoli-composite-application-manager-for-transactions-robotic-response-time/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1136038

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4759/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4678/

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1136914

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2019.4343/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0531/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-planning-analytics-has-addressed-multiple-security-vulnerabilities/

来源:www.oracle.com

链接：https://www.oracle.com/technetwork/security-advisory/cpuoct2019verbose-5072833.html

来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2019-2933

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-netcool-agile-service-manager-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-middleware-software-affect-ibm-cloud-pak-for-automation-2/

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201910-1012