Every CVE Search/ Get API key

CVE-2019-2697

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...

8.1 HighPublic exploitFix available

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

11.5%Up 1.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.1

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
CVE-2019-2697
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
CVE-2019-2697
Updated
2026-11-02
EUVDEUVD-2019-12336 No score

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
EUVD-2019-12336
Updated
2026-11-03
GitHub AdvisoriesGHSA-rpf9-c8x3-2pp3 8.1

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
GHSA-rpf9-c8x3-2pp3
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1163 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:1163
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:1164 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:1164
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVRHSA-2019:1165 7.5

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2019:1165
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:1166 7.5

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2019:1166
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2019:1238 9.8

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:1238
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:1325 7.5

Red Hat Security Advisory: java-1.8.0-ibm security update

Record
RHSA-2019:1325
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-2697 8.1

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
UBUNTU-CVE-2019-2697
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2019:1308-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 35.

Security issues fixed:

  • CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
  • CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
  • CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
  • CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
  • CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
Record
SUSE-SU-2019:1308-1
Updated
2026-11-02
OSVSUSE-SU-2019:1308-2 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 35.

Security issues fixed:

  • CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
  • CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
  • CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
  • CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
  • CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
Record
SUSE-SU-2019:1308-2
Updated
2026-11-02
OSVSUSE-SU-2019:1345-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Update to Java 7.1 Service Refresh 4 Fix Pack 45.

Security issues fixed:

  • CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
  • CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
  • CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
  • CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
  • CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
Record
SUSE-SU-2019:1345-1
Updated
2026-11-02
OSVSUSE-SU-2019:14059-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Update to Java 7.1 Service Refresh 4 Fix Pack 45.

Security issues fixed:

  • CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
  • CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
  • CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
  • CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
  • CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
Record
SUSE-SU-2019:14059-1
Updated
2026-11-02
OSVSUSE-SU-2019:1644-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 35.

Security issues fixed:

  • CVE-2019-10245: Fixed Java bytecode verifier issue causing crashes (bsc#1134718).
  • CVE-2019-2698: Fixed out of bounds access flaw in the 2D component (bsc#1132729).
  • CVE-2019-2697: Fixed flaw inside the 2D component (bsc#1132734).
  • CVE-2019-2602: Fixed flaw inside BigDecimal implementation (Component: Libraries) (bsc#1132728).
  • CVE-2019-2684: Fixed flaw was found in the RMI registry implementation (bsc#1132732).
Record
SUSE-SU-2019:1644-1
Updated
2026-11-02
OSVUSN-3975-1 No score

openjdk-8, openjdk-lts vulnerabilities

It was discovered that the BigDecimal implementation in OpenJDK performed excessive computation when given certain values. An attacker could use this to cause a denial of service (excessive CPU usage). (CVE-2019-2602)

Corwin de Boor and Robert Xiao discovered that the RMI registry implementation in OpenJDK did not properly select the correct skeleton class in some situations. An attacker could use this to possibly escape Java sandbox restrictions. (CVE-2019-2684)

Mateusz Jurczyk discovered a vulnerability in the 2D component of OpenJDK. An attacker could use this to possibly escape Java sandbox restrictions. This issue only affected OpenJDK 8 in Ubuntu 16.04 LTS. (CVE-2019-2697)

Mateusz Jurczyk discovered a vulnerability in the font layout engine of OpenJDK's 2D component. An attacker could use this to possibly escape Java sandbox restrictions. This issue only affected OpenJDK 8 in Ubuntu 16.04 LTS. (CVE-2019-2698)

Record
USN-3975-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.8.0-ibm
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
java-1.8.0-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
java-1.8.0-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
java-1.8.0-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
Show 58 moreShow less
Affected packages
PackageAffectedFixed
java-1.8.0-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
java-1.8.0-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el7
1:1.8.0.5.35-1jpp.1.el7
java-1.7.1-ibm
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el6_10
1:1.7.1.4.45-1jpp.1.el6_10
java-1.7.1-ibm
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 5 CVEs
 before 1:1.7.1.4.45-1jpp.1.el7
1:1.7.1.4.45-1jpp.1.el7
java-1.8.0-ibm
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-demo
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-devel
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-headless
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-jdbc
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-plugin
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-src
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm-webstart
Red Hat:enterprise_linux:8::supplementary
From an advisory covering 10 CVEs
 before 1:1.8.0.5.35-3.el8_0
1:1.8.0.5.35-3.el8_0
java-1.8.0-ibm
Red Hat:network_satellite:5.8::el6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1.8.0-ibm-devel
Red Hat:network_satellite:5.8::el6
From an advisory covering 5 CVEs
 before 1:1.8.0.5.35-1jpp.1.el6_10
1:1.8.0.5.35-1jpp.1.el6_10
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-3.20.1
1.8.0_sr5.35-3.20.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-3.20.1
1.8.0_sr5.35-3.20.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Enterprise Storage 4
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-38.37.1
1.7.1_sr4.45-38.37.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 5 CVEs
 before 1.7.1_sr4.45-26.40.1
1.7.1_sr4.45-26.40.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
java-1_8_0-ibm
SUSE:Enterprise Storage 4
From an advisory covering 5 CVEs
 before 1.8.0_sr5.35-30.50.1
1.8.0_sr5.35-30.50.1
openjdk-8
Ubuntu:16.04:LTS
 before 8u212-b03-0ubuntu1.16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 21 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.1
8u212-b03-0ubuntu1.16.04.1
openjdk-8
Ubuntu:18.04:LTS
 before 8u212-b03-0ubuntu1.18.04.1, plus listed versions
8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.18u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.1
8u212-b03-0ubuntu1.18.04.1
openjdk-8
Ubuntu:16.04:LTS
From an advisory covering 4 CVEs
 before 8u212-b03-0ubuntu1.16.04.1, plus listed versions
8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1
Show 21 moreShow less
8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.1
8u212-b03-0ubuntu1.16.04.1
openjdk-lts
Ubuntu:18.04:LTS
From an advisory covering 4 CVEs
 before 11.0.3+7-1ubuntu2~18.04.1, plus listed versions
9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2
Show 6 moreShow less
10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.3
11.0.3+7-1ubuntu2~18.04.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBOracle Java Runtime Environment - Heap Corruption During TTF font Rendering in sc_FindExtrema42019-04-17

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2697 is a high vulnerability (CVSS 8.1) in Oracle Corporation Java, published April 23, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.5%, the 96th percentile. Fixed in openjdk-8 8u212-b03-0ubuntu1.16.04.1.

References

Show 73 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open