VDB
BDU%3A2020-02548
BDU%3A2020-02548
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость компонента Libraries программных платформ Java SE и Java SE Embedded, позволяющая нарушителю получить полный контроль над приложением
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., АО «Концерн ВНИИНС» | GraalVM Enterprise Edition, Java SE, Java SE Embedded, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) | |
| Oracle Corporation | Java | Java SE: 7u251, 8u241, 11.0.6, 14, Java SE Embedded: 8u241 |
Timeline
- Apr 15, 2020 CVE Published
- Nov 21, 2023 CVE Updated
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
References
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://security.netapp.com/advisory/ntap-20200416-0004/ url
- DSA-4662 vendor-advisory
- USN-4337-1 vendor-advisory
- [debian-lts-announce] 20200429 [SECURITY] [DLA 2193-1] openjdk-7 security update mailing-list
- DSA-4668 vendor-advisory
- FEDORA-2020-5386fe3bbb vendor-advisory
- FEDORA-2020-21ca991b3b vendor-advisory
- FEDORA-2020-a60ad9d4ec vendor-advisory
- openSUSE-SU-2020:0757 vendor-advisory
- openSUSE-SU-2020:0800 vendor-advisory
- GLSA-202006-22 vendor-advisory
- openSUSE-SU-2020:0841 vendor-advisory
- GLSA-202209-15 vendor-advisory