Executive Summary
Summary | |
---|---|
Title | OpenJDK 11 vulnerability |
Informations | |||
---|---|---|---|
Name | USN-3949-1 | First vendor Publication | 2019-04-16 |
Vendor | Ubuntu | Last vendor Modification | 2019-04-16 |
Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N) | |||
---|---|---|---|
Cvss Base Score | 4.3 | Attack Range | Network |
Cvss Impact Score | 2.9 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Java applets or applications could be made to expose sensitive information. Software Description: - openjdk-lts: Open Source Java implementation Details: It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An attacker could use this to expose sensitive information and possibly bypass Java sandbox restrictions. (CVE-2019-2422) Please note that with this update, the OpenJDK package in Ubuntu 18.04 LTS has transitioned from OpenJDK 10 to OpenJDK 11. Several additional packages were updated to be compatible with OpenJDK 11. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any Java applications or applets to make all the necessary changes. References: Package Information: |
Original Source
Url : http://www.ubuntu.com/usn/USN-3949-1 |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 2 | |
Application | 3 | |
Application | 1 | |
Application | 2 | |
Application | 3 | |
Application | 3 | |
Application | 1 | |
Os | 4 | |
Os | 2 | |
Os | 2 | |
Os | 1 | |
Os | 2 | |
Os | 1 | |
Os | 3 | |
Os | 1 | |
Os | 1 | |
Os | 1 | |
Os | 2 |
Alert History
Date | Informations |
---|---|
2019-04-16 21:18:30 |
|