CVE-2019-2992

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
Link Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3134 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3135 Third Party Advisory
https://security.netapp.com/advisory/ntap-20191017-0001/ Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3136 Third Party Advisory
https://www.debian.org/security/2019/dsa-4546 Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/27 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/31 Mailing List Third Party Advisory
https://www.debian.org/security/2019/dsa-4548 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3157 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3158 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4109 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4110 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4113 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4115 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html Mailing List Third Party Advisory
https://usn.ubuntu.com/4223-1/ Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0006 Patch Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0046 Patch Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:jdk:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_unified_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

History

01 Nov 2022, 12:58

Type Values Removed Values Added
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - Third Party Advisory (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - Patch, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - Third Party Advisory (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - Patch, Third Party Advisory

30 Sep 2022, 20:33

Type Values Removed Values Added
First Time Redhat satellite
Canonical ubuntu Linux
Redhat enterprise Linux Eus
Canonical
Redhat enterprise Linux Server Aus
Opensuse leap
Redhat enterprise Linux Server Tus
Redhat enterprise Linux
Opensuse
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - Mailing List, Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - Third Party Advisory
References (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4223-1/ - (UBUNTU) https://usn.ubuntu.com/4223-1/ - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - Third Party Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - Third Party Advisory
CPE cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

13 May 2022, 14:57

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:jre:1.7.0:update_231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update_221:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*

Information

Published : 2019-10-16 18:15

Updated : 2022-11-01 12:58


NVD link : CVE-2019-2992

Mitre link : CVE-2019-2992


JSON object : View

Products Affected

redhat

  • enterprise_linux_workstation
  • enterprise_linux_server
  • enterprise_linux_desktop
  • enterprise_linux_server_aus
  • satellite
  • enterprise_linux_eus
  • enterprise_linux
  • enterprise_linux_server_tus

netapp

  • snapmanager
  • e-series_santricity_storage_manager
  • e-series_santricity_os_controller
  • e-series_santricity_unified_manager
  • oncommand_workflow_automation
  • e-series_santricity_web_services_proxy

oracle

  • jdk
  • jre

canonical

  • ubuntu_linux

debian

  • debian_linux

opensuse

  • leap