Every CVE Search/ Get API key

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....

3.1 LowFix available

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

2.30%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 3.1

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
CVE-2019-2933
CVSS 3.1
3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
CVE-2019-2933
Updated
2026-11-02
EUVDEUVD-2019-12572 No score

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
EUVD-2019-12572
Updated
2026-11-03
GitHub AdvisoriesGHSA-6q9q-g6rv-xhjc 3.1

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)....

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
GHSA-6q9q-g6rv-xhjc
CVSS 3.1
3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2019-2933 3.1

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
ALPINE-CVE-2019-2933
CVSS 3.1
3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-03
OSVopenSUSE-SU-2019:2557-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2557-1
Updated
2026-11-02
Show 15 moreShow less
OSVopenSUSE-SU-2019:2565-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2565-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2687-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:

Security issues fixed (bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Fixed build failuers on ARM (bsc#1138529).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2687-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score

java-11-openjdk-11.0.12.0-3.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10871-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score

java-13-openjdk-13.0.8.0-3.1 on GA media

These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10872-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10876-1 No score

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10876-1
Updated
2026-11-02
OSVSUSE-SU-2019:2998-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.5-10 fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:2998-1
Updated
2026-11-02
OSVSUSE-SU-2019:3083-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2977: Improve String index handling
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:3083-1
Updated
2026-11-02
OSVSUSE-SU-2019:3084-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk fixes the following issues:

Security issues fixed (October 2019 CPU bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856).
Record
SUSE-SU-2019:3084-1
Updated
2026-11-02
OSVSUSE-SU-2019:3238-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk (jdk8u232/icedtea 3.14.0) fixes the following issues:

Security issues fixed (bsc#1154212):

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Fixed build failuers on ARM (bsc#1138529).
Record
SUSE-SU-2019:3238-1
Updated
2026-11-02
OSVSUSE-SU-2020:0001-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

  • Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
    • Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2975 CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2996 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981 CVE-2019-17631
Record
SUSE-SU-2020:0001-1
Updated
2026-11-02
OSVSUSE-SU-2020:0024-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

  • Update to Java 8.0 Service Refresh 6 [bsc#1158442, bsc#1154212]
    • Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2975 CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2996 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981 CVE-2019-17631
Record
SUSE-SU-2020:0024-1
Updated
2026-11-02
OSVSUSE-SU-2020:0025-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk fixes the following issues:

Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU, bsc#1154212)

Security issues fixed:

  • CVE-2019-2933: Windows file handling redux
  • CVE-2019-2945: Better socket support
  • CVE-2019-2949: Better Kerberos ccache handling
  • CVE-2019-2958: Build Better Processes
  • CVE-2019-2964: Better support for patterns
  • CVE-2019-2962: Better Glyph Images
  • CVE-2019-2973: Better pattern compilation
  • CVE-2019-2975: Unexpected exception in jjs
  • CVE-2019-2978: Improved handling of jar files
  • CVE-2019-2981: Better Path supports
  • CVE-2019-2983: Better serial attributes
  • CVE-2019-2987: Better rendering of native glyphs
  • CVE-2019-2988: Better Graphics2D drawing
  • CVE-2019-2989: Improve TLS connection support
  • CVE-2019-2992: Enhance font glyph mapping
  • CVE-2019-2999: Commentary on Javadoc comments
  • CVE-2019-2894: Enhance ECDSA operations (bsc#1152856)

Bug fixes:

  • Add patch to fix hotspot-aarch64 (bsc#1138529).
Record
SUSE-SU-2020:0025-1
Updated
2026-11-02
OSVSUSE-SU-2020:0051-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Update to 7.1 Service Refresh 4 Fix Pack 55 [bsc#1158442, bsc#1154212]
    • Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2983 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
Record
SUSE-SU-2020:0051-1
Updated
2026-11-02
OSVSUSE-SU-2020:14263-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

  • Update to 7.1 Service Refresh 4 Fix Pack 55 [bsc#1158442, bsc#1154212]
    • Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2983 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
Record
SUSE-SU-2020:14263-1
Updated
2026-11-02
OSVSUSE-SU-2020:14265-1 No score

Security update for java-1_7_0-ibm

This update for java-1_7_0-ibm fixes the following issues:

  • Update to 7.0 Service Refresh 10 Fix Pack 55 [bsc#1158442, bsc#1154212]
    • Security fixes: CVE-2019-2933 CVE-2019-2945 CVE-2019-2958 CVE-2019-2962 CVE-2019-2964 CVE-2019-2978 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2999 CVE-2019-2973 CVE-2019-2981
Record
SUSE-SU-2020:14265-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk11
Alpine:v3.15
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.16
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.17
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.18
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.19
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.20
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.21
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.22
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.23
 before 11.0.5_p10-r0
11.0.5_p10-r0
openjdk11
Alpine:v3.24
 before 11.0.5_p10-r0
11.0.5_p10-r0
Show 107 moreShow less
Affected packages
PackageAffectedFixed
openjdk7
Alpine:v3.10
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.11
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.12
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.13
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.14
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.15
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.16
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.17
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.18
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk7
Alpine:v3.9
 before 7.241.2.6.20-r0
7.241.2.6.20-r0
openjdk8
Alpine:v3.10
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.11
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.12
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.13
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.14
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.15
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.16
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.17
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.18
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.19
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.20
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.21
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.22
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.23
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.24
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.7
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.8
 before 8.232.09-r0
8.232.09-r0
openjdk8
Alpine:v3.9
 before 8.232.09-r0
8.232.09-r0
openjdk-7
Debian:8
From an advisory covering 16 CVEs
 before 7u241-2.6.20-1~deb8u1, plus listed versions
7u101-2.6.6-17u101-2.6.6-1~deb8u17u101-2.6.6-27u101-2.6.6-2~deb7u17u101-2.6.6-2~deb8u1
Show 45 moreShow less
7u111-2.6.7-17u111-2.6.7-1~deb7u17u111-2.6.7-1~deb8u17u111-2.6.7-27u111-2.6.7-2~deb7u17u111-2.6.7-2~deb8u17u111-2.6.7-37u121-2.6.8-17u121-2.6.8-1~deb7u17u121-2.6.8-27u121-2.6.8-2~deb7u17u121-2.6.8-2~deb8u17u131-2.6.9-17u131-2.6.9-27u131-2.6.9-2~deb7u17u131-2.6.9-2~deb8u17u131-2.6.9-37u151-2.6.11-17u151-2.6.11-1~deb8u17u151-2.6.11-27u151-2.6.11-2~deb7u27u151-2.6.11-2~deb7u37u151-2.6.11-2~deb8u17u151-2.6.11-37u161-2.6.12-17u171-2.6.13-17u171-2.6.13-1~deb7u17u171-2.6.13-1~deb8u17u181-2.6.14-17u181-2.6.14-1~deb8u17u181-2.6.14-27u181-2.6.14-2~deb8u17u211-2.6.17-17u211-2.6.17-1~deb8u17u221-2.6.18-1~deb8u17u231-2.6.19-1~deb8u17u231-2.6.19-1~deb8u27u75-2.5.4-27u75-2.5.4-37u79-2.5.5-17u79-2.5.5-1~deb7u17u79-2.5.5-1~deb8u17u79-2.5.6-17u79-2.5.6-1~deb7u17u79-2.5.6-1~deb8u1
7u241-2.6.20-1~deb8u1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 18 CVEs
 before 11.0.5.0-3.36.1
11.0.5.0-3.36.1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 18 CVEs
 before 11.0.5.0-3.36.1
11.0.5.0-3.36.1
java-11-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 18 CVEs
 before 11.0.5.0-3.3.3
11.0.5.0-3.3.3
java-11-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 18 CVEs
 before 11.0.5.0-3.3.3
11.0.5.0-3.3.3
java-1_7_0-openjdk
SUSE:HPE Helion OpenStack 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_7_0-openjdk
SUSE:Enterprise Storage 5
From an advisory covering 16 CVEs
 before 1.7.0.241-43.30.1
1.7.0.241-43.30.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 17 CVEs
 before 1.8.0.232-3.27.1
1.8.0.232-3.27.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-3.30.1
1.8.0_sr6.0-3.30.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-3.30.1
1.8.0_sr6.0-3.30.1
java-1_8_0-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-ibm
SUSE:Enterprise Storage 5
From an advisory covering 16 CVEs
 before 1.8.0_sr6.0-30.60.1
1.8.0_sr6.0-30.60.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 17 CVEs
 before 1.8.0.232-27.38.1
1.8.0.232-27.38.1
java-1_7_1-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Enterprise Storage 5
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-38.44.1
1.7.1_sr4.55-38.44.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 11 CVEs
 before 1.7.1_sr4.55-26.47.1
1.7.1_sr4.55-26.47.1
java-1_7_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 13 CVEs
 before 1.7.0_sr10.55-65.45.1
1.7.0_sr10.55-65.45.1
java-11-openjdk
openSUSE:Leap 15.0
From an advisory covering 18 CVEs
 before 11.0.5.0-lp150.2.28.1
11.0.5.0-lp150.2.28.1
java-11-openjdk
openSUSE:Leap 15.1
From an advisory covering 18 CVEs
 before 11.0.5.0-lp151.3.9.2
11.0.5.0-lp151.3.9.2
java-1_8_0-openjdk
openSUSE:Leap 15.1
From an advisory covering 17 CVEs
 before 1.8.0.232-lp151.2.6.1
1.8.0.232-lp151.2.6.1
java-11-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 11.0.12.0-3.1
11.0.12.0-3.1
java-13-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 13.0.8.0-3.1
13.0.8.0-3.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 175 CVEs
 before 1.8.0.302-2.2
1.8.0.302-2.2

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2933 is a low vulnerability (CVSS 3.1) in Oracle Corporation Java, published October 16, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in openjdk11 11.0.5_p10-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 21 versions and 18 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open