Security Alert (A24-10-18): Multiple Vulnerabilities in Oracle Java and Oracle Products (October 2024)


 

Published on: 16 October 2024

  
  

Description:

Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products. The list of patches can be found at:
https://www.oracle.com/security-alerts/cpuoct2024.html

 

Affected Systems:

  • Oracle Java SE
  • Database
  • Fusion Applications and Middleware
  • Oracle MySQL Product Suite
  • NoSQL Database
  • Oracle and Sun Systems Products Suite

A complete list of the affected products can be found at:
https://www.oracle.com/security-alerts/cpuoct2024.html

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass or tampering on an affected system.

 

Recommendation:

Patches for affected systems are available. Users of the affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

For Oracle Java SE products, please refer to the following link:
Java Platform SE 8u431 (JDK and JRE)
Java Platform SE 11.0.25 (JDK and JRE)
Java Platform SE 17.0.13 (JDK and JRE)
Java Platform SE 21.0.5 (JDK and JRE)
Java Platform SE 23.0.1 (JDK and JRE)
https://www.oracle.com/java/technologies/javase-downloads.html

For OpenJDK, please refer to the following link:
https://jdk.java.net/

Users could also access the security advisory below for the information about the security updates of other Oracle products:
https://www.oracle.com/security-alerts/cpuoct2024.html

Users may contact their vendors for the fixes and assistance.

 

More Information:

  • https://www.oracle.com/security-alerts/cpuoct2024.html
  • https://www.hkcert.org/security-bulletin/oracle-products-multiple-vulnerabilities_20241016
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10172
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022 (to CVE-2020-11023)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17521
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23358
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28170
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36713
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37137
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41184
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2601
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23305
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23437
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31129
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34381
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46337
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2953
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3635
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4043
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4759
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5072
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5685
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5752
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6816
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20863
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28439
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28823
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33201
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34055
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35116
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39410
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39743
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42950
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44483
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46136
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50447
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51775
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0232
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4577
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5585
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5971
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6162
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7254
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21172
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21190 (to CVE-2024-21219)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21230 (to CVE-2024-21239)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21241 (to CVE-2024-21244)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21246 (to CVE-2024-21255)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21257 (to CVE-2024-21286)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22020
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22201
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22257
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22262
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23635
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23672
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23807
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23944
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24549
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25269
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25638
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26130
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26308
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28752
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28849
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29025
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29131
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29133
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29736
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29857
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30251
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31080
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31744
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32007
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32114
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34750
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36052
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36138
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38357
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38476
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38808 (to CVE-2024-38809)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38816
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38999
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40898
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41817
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41909
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43044
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43407
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45801


Tag: Oracle , Java , Oracle Database , Fusion , MySQL , Oracle NoSQL , Sun Systems
Tags