4.3

CVE-2020-2756

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.7.0 Updateupdate251
Oracle ≫ Jdk Version1.8.0 Updateupdate241
Oracle ≫ Jdk Version11.0.6
Oracle ≫ Jdk Version14.0.0
Oracle ≫ Jre Version1.7.0 Updateupdate251
Oracle ≫ Jre Version1.8.0 Updateupdate241
Oracle ≫ Jre Version11.0.6
Oracle ≫ Jre Version14.0.0
Oracle ≫ Openjdk Version >= 11 <= 11.0.6
Oracle ≫ Openjdk Version >= 13 <= 13.0.2
Oracle ≫ Openjdk Version7 Update-
Oracle ≫ Openjdk Version7 Updateupdate1
Oracle ≫ Openjdk Version7 Updateupdate10
Oracle ≫ Openjdk Version7 Updateupdate101
Oracle ≫ Openjdk Version7 Updateupdate11
Oracle ≫ Openjdk Version7 Updateupdate111
Oracle ≫ Openjdk Version7 Updateupdate121
Oracle ≫ Openjdk Version7 Updateupdate13
Oracle ≫ Openjdk Version7 Updateupdate131
Oracle ≫ Openjdk Version7 Updateupdate141
Oracle ≫ Openjdk Version7 Updateupdate15
Oracle ≫ Openjdk Version7 Updateupdate151
Oracle ≫ Openjdk Version7 Updateupdate161
Oracle ≫ Openjdk Version7 Updateupdate17
Oracle ≫ Openjdk Version7 Updateupdate171
Oracle ≫ Openjdk Version7 Updateupdate181
Oracle ≫ Openjdk Version7 Updateupdate191
Oracle ≫ Openjdk Version7 Updateupdate2
Oracle ≫ Openjdk Version7 Updateupdate201
Oracle ≫ Openjdk Version7 Updateupdate21
Oracle ≫ Openjdk Version7 Updateupdate211
Oracle ≫ Openjdk Version7 Updateupdate221
Oracle ≫ Openjdk Version7 Updateupdate231
Oracle ≫ Openjdk Version7 Updateupdate241
Oracle ≫ Openjdk Version7 Updateupdate25
Oracle ≫ Openjdk Version7 Updateupdate251
Oracle ≫ Openjdk Version7 Updateupdate3
Oracle ≫ Openjdk Version7 Updateupdate4
Oracle ≫ Openjdk Version7 Updateupdate40
Oracle ≫ Openjdk Version7 Updateupdate45
Oracle ≫ Openjdk Version7 Updateupdate5
Oracle ≫ Openjdk Version7 Updateupdate51
Oracle ≫ Openjdk Version7 Updateupdate55
Oracle ≫ Openjdk Version7 Updateupdate6
Oracle ≫ Openjdk Version7 Updateupdate60
Oracle ≫ Openjdk Version7 Updateupdate65
Oracle ≫ Openjdk Version7 Updateupdate67
Oracle ≫ Openjdk Version7 Updateupdate7
Oracle ≫ Openjdk Version7 Updateupdate72
Oracle ≫ Openjdk Version7 Updateupdate76
Oracle ≫ Openjdk Version7 Updateupdate80
Oracle ≫ Openjdk Version7 Updateupdate85
Oracle ≫ Openjdk Version7 Updateupdate9
Oracle ≫ Openjdk Version7 Updateupdate91
Oracle ≫ Openjdk Version7 Updateupdate95
Oracle ≫ Openjdk Version7 Updateupdate97
Oracle ≫ Openjdk Version7 Updateupdate99
Oracle ≫ Openjdk Version8 Update-
Oracle ≫ Openjdk Version8 Updateupdate101
Oracle ≫ Openjdk Version8 Updateupdate102
Oracle ≫ Openjdk Version8 Updateupdate11
Oracle ≫ Openjdk Version8 Updateupdate111
Oracle ≫ Openjdk Version8 Updateupdate112
Oracle ≫ Openjdk Version8 Updateupdate121
Oracle ≫ Openjdk Version8 Updateupdate131
Oracle ≫ Openjdk Version8 Updateupdate141
Oracle ≫ Openjdk Version8 Updateupdate151
Oracle ≫ Openjdk Version8 Updateupdate152
Oracle ≫ Openjdk Version8 Updateupdate161
Oracle ≫ Openjdk Version8 Updateupdate162
Oracle ≫ Openjdk Version8 Updateupdate171
Oracle ≫ Openjdk Version8 Updateupdate172
Oracle ≫ Openjdk Version8 Updateupdate181
Oracle ≫ Openjdk Version8 Updateupdate191
Oracle ≫ Openjdk Version8 Updateupdate192
Oracle ≫ Openjdk Version8 Updateupdate20
Oracle ≫ Openjdk Version8 Updateupdate201
Oracle ≫ Openjdk Version8 Updateupdate202
Oracle ≫ Openjdk Version8 Updateupdate211
Oracle ≫ Openjdk Version8 Updateupdate212
Oracle ≫ Openjdk Version8 Updateupdate221
Oracle ≫ Openjdk Version8 Updateupdate231
Oracle ≫ Openjdk Version8 Updateupdate241
Oracle ≫ Openjdk Version8 Updateupdate25
Oracle ≫ Openjdk Version8 Updateupdate31
Oracle ≫ Openjdk Version8 Updateupdate40
Oracle ≫ Openjdk Version8 Updateupdate45
Oracle ≫ Openjdk Version8 Updateupdate5
Oracle ≫ Openjdk Version8 Updateupdate51
Oracle ≫ Openjdk Version8 Updateupdate60
Oracle ≫ Openjdk Version8 Updateupdate65
Oracle ≫ Openjdk Version8 Updateupdate66
Oracle ≫ Openjdk Version8 Updateupdate71
Oracle ≫ Openjdk Version8 Updateupdate72
Oracle ≫ Openjdk Version8 Updateupdate73
Oracle ≫ Openjdk Version8 Updateupdate74
Oracle ≫ Openjdk Version8 Updateupdate77
Oracle ≫ Openjdk Version8 Updateupdate91
Oracle ≫ Openjdk Version8 Updateupdate92
Oracle ≫ Openjdk Version14
Netapp ≫ Active Iq Unified Manager SwPlatformwindows Version >= 7.3
Netapp ≫ Active Iq Unified Manager SwPlatformvsphere Version >= 9.5
Netapp ≫ Cloud Backup Version-
Netapp ≫ Cloud Secure Agent Version-
Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.70.2
Netapp ≫ E-series Santricity Web Services Version- SwPlatformweb_services_proxy
Netapp ≫ Oncommand Insight Version-
Netapp ≫ Snapmanager Version- SwPlatformsap
Netapp ≫ Snapmanager Version- Update- SwPlatformoracle
Netapp ≫ Storagegrid Version >= 9.0.0 <= 9.0.4
Netapp ≫ Storagegrid Version-
Fedoraproject ≫ Fedora Version30
Fedoraproject ≫ Fedora Version31
Fedoraproject ≫ Fedora Version32
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.10
Opensuse ≫ Leap Version15.1
Opensuse ≫ Leap Version15.2
Mcafee ≫ Epolicy Orchestrator Version >= 5.9.0 < 5.10.0
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_1
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_2
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_3
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_4
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_5
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_6
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_7
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Updateupdate_8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.495
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.7 2.2 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
secalert_us@oracle.com 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://usn.ubuntu.com/4337-1/
Third Party Advisory