漏洞信息详情
Oracle GraalVM 安全漏洞
漏洞简介
Oracle GraalVM是美国甲骨文(Oracle)公司的一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。GraalVM Enterprise Edition是GraalVM的企业版。
Oracle GraalVM Enterprise Edition 19.3.2版本和20.1.0版本中的Java组件存在安全漏洞。攻击者可利用该漏洞控制Oracle GraalVM Enterprise Edition,影响数据的可用性、保密性和完整性。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://www.oracle.com/security-alerts/cpujul2020.html
参考网址
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/QQUMIAON2YEFRONMIUVHAKYCIOLICDBA/
来源:GENTOO
链接:https://security.gentoo.org/glsa/202008-24
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/08/msg00021.html
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20200717-0005/
来源:www.debian.org
链接:https://www.debian.org/lts/security/2020/dla-2325
来源:DEBIAN
链接:https://www.debian.org/security/2020/dsa-4734
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/6CFJPOYF3CWYEPCDOAOCNFJTQIKKWPHW/
来源:UBUNTU
链接:https://usn.ubuntu.com/4433-1/
来源:MISC
链接:https://www.oracle.com/security-alerts/cpujul2020.html
来源:UBUNTU
链接:https://usn.ubuntu.com/4453-1/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-connectdirect-web-services-2/
来源:www.oracle.com
链接:https://www.oracle.com/security-alerts/cpujul2020.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/160571/Red-Hat-Security-Advisory-2020-5585-01.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-oracle-jul-2020-cpu-plus-one-additional-vulnerability-and-oracle-deferred-from-jan-2020/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2534/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-ibm-java-runtime-vulnerabilities-affect-ibm-sterling-connectdirect-browser-user-interface/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2736/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affects-websphere-application-server-july-2020-cpu-that-is-bundled-with-ibm-websphere-application-server-patterns/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2748/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/159012/Gentoo-Linux-Security-Advisory-202008-24.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-12/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-tivoli-monitoring-3/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3042/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3232/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158784/Ubuntu-Security-Notice-USN-4453-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2690/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Oracle-Java-OpenJDK-vulnerabilities-of-July-2020-32831
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4201/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4463/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2521/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2545/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-may-affect-ibm-sdk-java-technology-edition-that-is-used-by-ibm-workload-scheduler/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-in-java-se-affects-rational-build-forge/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3015/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-jul-2020-includes-oracle-jul-2020-cpu-plus-one-additional-vulnerability-affects-content-collecor-for-sap-applications-2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerability-has-been-identified-in-oracle-java-shipped-with-ibm-intelligent-operations-center/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158521/Red-Hat-Security-Advisory-2020-3098-01.html
来源:www.nsfocus.net
链接:http://www.nsfocus.net/vulndb/49834
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-data-risk-manager-is-affected-by-multiple-vulnerabilities-3/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-sdk-java-affects-ibm-cloud-application-business-insights/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158824/Red-Hat-Security-Advisory-2020-3387-01.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-directory-server-3/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-performance-management-products-7/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2645/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2807/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-jul-2020-includes-oracle-jul-2020-cpu-plus-one-additional-vulnerability-affects-content-collecor-for-sap-applications/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-10/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3496/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-jul-2020-vulnerabilities-affecting-infosphere-streams-4-3/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.3930/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-resilient-soar-is-using-components-with-known-vulnerabilities-ibm-sdk-java-technology-edition-v8-0-6-11/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-java-vulnerability-affects-ibm-watson-text-to-speech-and-speech-to-text-ibm-watson-speech-services-for-cloud-pak-for-data-1-2/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-cics-tx-on-cloud-2/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4089/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.4166/
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-directory-server-2/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158452/Red-Hat-Security-Advisory-2020-2985-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2020.2438/
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2020-14583
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-july-2020-critical-patch-update-for-java/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158537/Ubuntu-Security-Notice-USN-4433-1.html
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-java-sdk-that-affect-ibm-security-directory-suite/
受影响实体
暂无
补丁
- Oracle GraalVM Enterprise Edition Java组件安全漏洞的修复措施<!--2020-7-14-->
还没有评论,来说两句吧...