CVE-2021-35565
CVE-2021-35565
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
CVSS 5.3 · Moyenne · EPSS 7,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system · applications
Produits et versions concernés
java
- Versions du logiciel
- Java SE:7u311: Concernée
- Java SE:8u301: Concernée
- Java SE:11.0.12: Concernée
- Oracle GraalVM Enterprise Edition:20.3.3: Concernée
- Oracle GraalVM Enterprise Edition:21.2.0: Concernée
Aucun correctif publié
openjdk-11 Debian:11
- Versions du logiciel
- 11.0.12+7-2
- 11.0.13+8-1~deb10u1
- Plages de versions concernées
- ECOSYSTEM: < 11.0.13+8-1~deb11u1
Mettez à jour vers 11.0.13+8-1~deb11u1
openjdk-8 Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 8u66-b01-5
- 8u72-b05-1ubuntu1
- 8u72-b05-5
- 8u72-b05-6
- 8u72-b15-1
- 8u72-b15-2ubuntu1
- 8u72-b15-2ubuntu3
- 8u72-b15-3ubuntu1
- 8u77-b03-1ubuntu2
- 8u77-b03-3ubuntu1
- 8u77-b03-3ubuntu2
- 8u77-b03-3ubuntu3
- 8u91-b14-0ubuntu4~16.04.1
- 8u91-b14-3ubuntu1~16.04.1
- 8u111-b14-2ubuntu0.16.04.2
- 8u121-b13-0ubuntu1.16.04.2
- 8u131-b11-0ubuntu1.16.04.2
- 8u131-b11-2ubuntu1.16.04.2
- 8u131-b11-2ubuntu1.16.04.3
- 8u151-b12-0ubuntu0.16.04.2
- 8u162-b12-0ubuntu0.16.04.2
- 8u171-b11-0ubuntu0.16.04.1
- 8u181-b13-0ubuntu0.16.04.1
- 8u181-b13-1ubuntu0.16.04.1
- 8u191-b12-0ubuntu0.16.04.1
- 8u191-b12-2ubuntu0.16.04.1
- 8u212-b03-0ubuntu1.16.04.1
- 8u222-b10-1ubuntu1~16.04.1
- 8u232-b09-0ubuntu1~16.04.1
- 8u242-b08-0ubuntu3~16.04
- 8u252-b09-1~16.04
- 8u265-b01-0ubuntu2~16.04
- 8u272-b10-0ubuntu1~16.04
- 8u275-b01-0ubuntu1~16.04
- 8u282-b08-0ubuntu1~16.04
- 8u292-b10-0ubuntu1~16.04.1
- Plages de versions concernées
- ECOSYSTEM: < 8u312-b07-0ubuntu1~16.04
Mettez à jour vers 8u312-b07-0ubuntu1~16.04
openjdk-9 Ubuntu:16.04:LTS
- Versions du logiciel
- 9~b88-1
- 9~b101-2ubuntu2
- 9~b102-1
- 9~b113-0ubuntu1
- 9~b114-0ubuntu1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
openjdk-8 Ubuntu:18.04:LTS
- Versions du logiciel
- 8u144-b01-2
- 8u151-b12-1
- 8u162-b12-1
- 8u171-b11-0ubuntu0.18.04.1
- 8u181-b13-0ubuntu0.18.04.1
- 8u181-b13-1ubuntu0.18.04.1
- 8u191-b12-0ubuntu0.18.04.1
- 8u191-b12-2ubuntu0.18.04.1
- 8u212-b03-0ubuntu1.18.04.1
- 8u222-b10-1ubuntu1~18.04.1
- 8u232-b09-0ubuntu1~18.04.1
- 8u242-b08-0ubuntu3~18.04
- 8u252-b09-1~18.04
- 8u265-b01-0ubuntu2~18.04
- 8u272-b10-0ubuntu1~18.04
- 8u275-b01-0ubuntu1~18.04
- 8u282-b08-0ubuntu1~18.04
- 8u292-b10-0ubuntu1~18.04
- Plages de versions concernées
- ECOSYSTEM: < 8u312-b07-0ubuntu1~18.04
Mettez à jour vers 8u312-b07-0ubuntu1~18.04
openjdk-lts Ubuntu:18.04:LTS
- Versions du logiciel
- 9.0.4+12-2ubuntu4
- 9.0.4+12-4ubuntu1
- 10~46-4ubuntu1
- 10~46-5ubuntu1
- 10.0.1+10-1ubuntu2
- 10.0.1+10-3ubuntu1
- 10.0.2+13-1ubuntu0.18.04.1
- 10.0.2+13-1ubuntu0.18.04.2
- 10.0.2+13-1ubuntu0.18.04.3
- 10.0.2+13-1ubuntu0.18.04.4
- 11.0.2+9-3ubuntu1~18.04.3
- 11.0.3+7-1ubuntu2~18.04.1
- 11.0.4+11-1ubuntu2~18.04.3
- 11.0.5+10-0ubuntu1.1~18.04
- 11.0.6+10-1ubuntu1~18.04.1
- 11.0.7+10-2ubuntu2~18.04
- 11.0.8+10-0ubuntu1~18.04.1
- 11.0.9+11-0ubuntu1~18.04.1
- 11.0.9.1+1-0ubuntu1~18.04
- 11.0.10+9-0ubuntu1~18.04
- 11.0.11+9-0ubuntu2~18.04
- Plages de versions concernées
- ECOSYSTEM: < 11.0.13+8-0ubuntu1~18.04
Mettez à jour vers 11.0.13+8-0ubuntu1~18.04
openjdk-8 Ubuntu:20.04:LTS
- Versions du logiciel
- 8u232-b09-0ubuntu1
- 8u232-b09-1
- 8u242-b04-1
- 8u242-b08-0ubuntu3
- 8u252-b07-1
- 8u252-b09-1ubuntu1
- 8u265-b01-0ubuntu2~20.04
- 8u272-b10-0ubuntu1~20.04
- 8u275-b01-0ubuntu1~20.04
- 8u282-b08-0ubuntu1~20.04
- 8u292-b10-0ubuntu1~20.04
- Plages de versions concernées
- ECOSYSTEM: < 8u312-b07-0ubuntu1~20.04
Mettez à jour vers 8u312-b07-0ubuntu1~20.04
openjdk-lts Ubuntu:20.04:LTS
- Versions du logiciel
- 11.0.5+10-0ubuntu1
- 11.0.5+10-2ubuntu1
- 11.0.6+10-1ubuntu1
- 11.0.6+10-2ubuntu2
- 11.0.7+9-1ubuntu1
- 11.0.7+10-2ubuntu1
- 11.0.7+10-3ubuntu1
- 11.0.8+10-0ubuntu1~20.04
- 11.0.9+11-0ubuntu1~20.04
- 11.0.9.1+1-0ubuntu1~20.04
- 11.0.10+9-0ubuntu1~20.04
- 11.0.11+9-0ubuntu2~20.04
- Plages de versions concernées
- ECOSYSTEM: < 11.0.13+8-0ubuntu1~20.04
Mettez à jour vers 11.0.13+8-0ubuntu1~20.04
openjdk-13 Ubuntu:20.04:LTS
- Versions du logiciel
- 13+33-1
- 13.0.1+9-2
- 13.0.2+8-1
- 13.0.2+8-2
- 13.0.3+3-1ubuntu2
- 13.0.4+8-1~20.04
- 13.0.7+5-0ubuntu1~20.04
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
Sources originales
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://security.netapp.com/advisory/ntap-20211022-0004/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V362B2BWTH5IJDL45QPQGMBKIQOG7JX5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/
- https://www.debian.org/security/2021/dsa-5000
- https://lists.debian.org/debian-lts-announce/2021/11/msg00008.html
- https://security.gentoo.org/glsa/202209-05
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://nvd.nist.gov/vuln/detail/CVE-2021-35565