Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.856356
Category:openSUSE Local Security Checks
Title:openSUSE Security Advisory (SUSE-SU-2024:1859-1)
Summary:The remote host is missing an update for the 'java-1_8_0-ibm' package(s) announced via the SUSE-SU-2024:1859-1 advisory.
Description:Summary:
The remote host is missing an update for the 'java-1_8_0-ibm' package(s) announced via the SUSE-SU-2024:1859-1 advisory.

Vulnerability Insight:
This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 8 Fix Pack 25 (bsc#1223470):

- CVE-2023-38264: Fixed Object Request Broker (ORB) denial of service (bsc#1224164).
- CVE-2024-21094: Fixed C2 compilation fails with 'Exceeded _node_regs array' (bsc#1222986).
- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (bsc#1222983).
- CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984).
- CVE-2024-21011: Fixed Long Exception message leading to crash (bsc#1222979).
- CVE-2024-21012: Fixed HTTP/2 client improper reverse DNS lookup (bsc#1222987).

Affected Software/OS:
'java-1_8_0-ibm' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6.

Solution:
Please install the updated package(s).

CVSS Score:
5.4

CVSS Vector:
AV:N/AC:H/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2023-38264
https://exchange.xforce.ibmcloud.com/vulnerabilities/260578
https://www.ibm.com/support/pages/node/7150727
Common Vulnerability Exposure (CVE) ID: CVE-2024-21011
Oracle Advisory
https://www.oracle.com/security-alerts/cpuapr2024.html
https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html
Common Vulnerability Exposure (CVE) ID: CVE-2024-21012
Common Vulnerability Exposure (CVE) ID: CVE-2024-21068
Common Vulnerability Exposure (CVE) ID: CVE-2024-21085
Common Vulnerability Exposure (CVE) ID: CVE-2024-21094
CopyrightCopyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.