CVE-2019-2821
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions...
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
CVE-2019-2821- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
CVE-2019-2821- Updated
- 2026-11-02
EUVDEUVD-2019-12460 No score
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
EUVD-2019-12460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4664-6235-3f5j No score
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions...
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
GHSA-4664-6235-3f5j- Updated
- 2026-11-02
OSVALPINE-CVE-2019-2821
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
ALPINE-CVE-2019-2821- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-03
OSV
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
CVE-2019-2821- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2019-2821
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
DEBIAN-CVE-2019-2821- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2019:1810
Red Hat Security Advisory: java-11-openjdk security update
- Record
RHSA-2019:1810- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2019:1817
Red Hat Security Advisory: java-11-openjdk security update
- Record
RHSA-2019:1817- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-2821
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N).
- Record
UBUNTU-CVE-2019-2821- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1916-1 No score
Security update for java-11-openjdk
This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-7317: Improve PNG support options (bsc#1141780).
- CVE-2019-2818: Better Poly1305 support (bsc#1141788).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
- Certificate validation improvements
Non-security issues fixed:
- Do not fail installation when the manpages are not present (bsc#1115375)
- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1916-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score
java-11-openjdk-11.0.12.0-3.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10871-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score
java-13-openjdk-13.0.8.0-3.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10872-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2002-1 No score
Security update for java-11-openjdk
This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:
Security issues fixed:
- CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
- CVE-2019-2762: Exceptional throw cases (bsc#1141782).
- CVE-2019-2766: Improve file protocol handling (bsc#1141789).
- CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
- CVE-2019-2786: More limited privilege usage (bsc#1141787).
- CVE-2019-7317: Improve PNG support options (bsc#1141780).
- CVE-2019-2818: Better Poly1305 support (bsc#1141788).
- CVE-2019-2816: Normalize normalization (bsc#1141785).
- CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
- Certificate validation improvements
Non-security issues fixed:
- Do not fail installation when the manpages are not present (bsc#1115375)
- Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)
- Record
SUSE-SU-2019:2002-1- Updated
- 2026-11-02
OSVUSN-4083-1 No score
openjdk-lts vulnerabilities
It was discovered that OpenJDK did not sufficiently validate serial streams before deserializing suppressed exceptions in some situations. An attacker could use this to specially craft an object that, when deserialized, would cause a denial of service. (CVE-2019-2762)
It was discovered that in some situations OpenJDK did not properly bound the amount of memory allocated during object deserialization. An attacker could use this to specially craft an object that, when deserialized, would cause a denial of service (excessive memory consumption). (CVE-2019-2769)
It was discovered that OpenJDK did not properly restrict privileges in certain situations. An attacker could use this to specially construct an untrusted Java application or applet that could escape sandbox restrictions. (CVE-2019-2786)
Jonathan Birch discovered that the Networking component of OpenJDK did not properly validate URLs in some situations. An attacker could use this to bypass restrictions on characters in URLs. (CVE-2019-2816)
It was discovered that the ChaCha20Cipher implementation in OpenJDK did not use constant time computations in some situations. An attacker could use this to expose sensitive information. (CVE-2019-2818)
It was discovered that the Java Secure Socket Extension (JSSE) component in OpenJDK did not properly handle OCSP stapling messages during TLS handshake in some situations. An attacker could use this to expose sensitive information. (CVE-2019-2821)
It was discovered that OpenJDK incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file, a remote attacker could use this issue to cause OpenJDK to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-7317)
- Record
USN-4083-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk11Alpine:v3.15 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.16 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.17 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.18 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.19 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.20 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.21 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.22 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.23 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
openjdk11Alpine:v3.24 |
before 11.0.4_p11-r0 | 11.0.4_p11-r0 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openjdk-11Debian:11 |
before 11.0.4+11-1 | 11.0.4+11-1 |
openjdk-11Debian:10 From an advisory covering 7 CVEs |
before 11.0.4+11-1~deb10u1, plus listed versions 11.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-1~bpo9+111.0.4+2-1 Show 6 moreShow less11.0.4+4+really11.0.3+7-111.0.4+4+really11.0.3+7-211.0.4+4-111.0.4+6-111.0.4+8-111.0.4+9-1 |
11.0.4+11-1~deb10u1 |
java-11-openjdkRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::client From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::server From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-develRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headlessRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demoRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-demo-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-devel-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-headless-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadocRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-javadoc-zip-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-jmods-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-srcRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdk-src-debugRed Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el7_6 | 1:11.0.4.11-0.el7_6 |
java-11-openjdkRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-demoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-develRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-devel-slowdebug-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-headlessRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-headless-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-headless-slowdebug-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-javadocRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-javadoc-zipRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-jmodsRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-slowdebug-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdk-srcRed Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs |
before 1:11.0.4.11-0.el8_0 | 1:11.0.4.11-0.el8_0 |
java-11-openjdkSUSE:Linux Enterprise Module for Basesystem 15 From an advisory covering 9 CVEs |
before 11.0.4.0-3.33.1 | 11.0.4.0-3.33.1 |
java-11-openjdkSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 9 CVEs |
before 11.0.4.0-3.33.1 | 11.0.4.0-3.33.1 |
openjdk-ltsUbuntu:18.04:LTS |
before 11.0.4+11-1ubuntu2~18.04.3, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 7 moreShow less10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.1 |
11.0.4+11-1ubuntu2~18.04.3 |
openjdk-ltsUbuntu:18.04:LTS From an advisory covering 7 CVEs |
before 11.0.4+11-1ubuntu2~18.04.3, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 7 moreShow less10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.1 |
11.0.4+11-1ubuntu2~18.04.3 |
java-11-openjdkopenSUSE:Leap 15.0 From an advisory covering 9 CVEs |
before 11.0.4.0-lp151.3.6.1 | 11.0.4.0-lp151.3.6.1 |
java-11-openjdkopenSUSE:Leap 15.1 From an advisory covering 9 CVEs |
before 11.0.4.0-lp151.3.6.1 | 11.0.4.0-lp151.3.6.1 |
java-11-openjdkopenSUSE:Tumbleweed From an advisory covering 95 CVEs |
before 11.0.12.0-3.1 | 11.0.12.0-3.1 |
java-13-openjdkopenSUSE:Tumbleweed From an advisory covering 95 CVEs |
before 13.0.8.0-3.1 | 13.0.8.0-3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-2821 is a medium vulnerability (CVSS 5.3) in Oracle Corporation Java, published July 21, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. Fixed in openjdk11 11.0.4_p11-r0.
References
oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
usn.ubuntu.com/4083-1
lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
nvd.nist.gov/vuln/detail/CVE-2019-2821
github.com/advisories/GHSA-4664-6235-3f5j
security.alpinelinux.org/vuln/CVE-2019-2821
Show 149 moreShow less
security-tracker.debian.org/tracker/CVE-2019-2821
access.redhat.com/errata/RHSA-2019:1810
bugzilla.redhat.com/show_bug.cgi?id=1730056
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1810.json
cve.org/CVERecord?id=CVE-2019-2745
suse.com/support/update/announcement/2019/suse-su-20192002-1
bugzilla.suse.com/1115375
ubuntu.com/security/CVE-2019-2821