{"id":"CVE-2020-2816","aliases":["ALPINE-CVE-2020-2816","BIT-java-2020-2816","BIT-java-min-2020-2816","BIT-jre-2020-2816","DEBIAN-CVE-2020-2816","DSA-4662-1","EUVD-2020-22609","GHSA-wq43-mwf7-pm7c","RHSA-2020:1509","RHSA-2020:1514","RHSA-2020:1517","SUSE-SU-2020:1511-1","SUSE-SU-2020:1511-2","SUSE-SU-2020:1572-1","UBUNTU-CVE-2020-2816","USN-4337-1","openSUSE-SU-2020:0757-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1"],"status":"published","title":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02766,"percentile":0.86402,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2020-04-15T13:29:47Z","modified":"2026-11-03T06:32:25Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.7_p10-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["11.0.7","14.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["11.0.7","14.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["11.0.7","14.0.1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openjdk-11","fixed_in":["11.0.7+10-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.7+10-2ubuntu2~18.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.7+10-2ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7_p10-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.7"},{"introduced":"12.0.0"},{"fixed":"14.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.7"},{"introduced":"12.0.0"},{"fixed":"14.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.7"},{"introduced":"12.0.0"},{"fixed":"14.0.1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7+10-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7+10-3~deb10u1"}]}],"versions":["11.0.3+7-5","11.0.4+1-1","11.0.4+10-1","11.0.4+11-1","11.0.4+11-1~bpo9+1","11.0.4+11-1~deb10u1","11.0.4+2-1","11.0.4+4+really11.0.3+7-1","11.0.4+4+really11.0.3+7-2","11.0.4+4-1","11.0.4+6-1","11.0.4+8-1","11.0.4+9-1","11.0.5+10-1","11.0.5+10-1~bpo9+1","11.0.5+10-1~deb10u1","11.0.5+10-2","11.0.5+6-1","11.0.5+6-2","11.0.5+9-1","11.0.6+10-1","11.0.6+10-1~bpo9+1","11.0.6+10-1~deb10u1","11.0.6+10-2","11.0.6+7-1","11.0.7+10-1","11.0.7+10-2","11.0.7+9-1"],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-4.el7_8"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_1"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.7.10-1.el8_0"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.42.4"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.9.2"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-3.9.2"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7+10-2ubuntu2~18.04"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7+10-2ubuntu1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u252-b09-1~16.04"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u252-b09-1~18.04"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04"],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7+10-2ubuntu2~18.04"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1"],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.7.0-lp151.3.16.1"}]}],"bundled":13},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.12.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-13-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8.0-3.1"}]}],"bundled":95}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"7-mode_transition_tool"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"e-series_performance_analyzer"},{"vendor":"netapp","product":"e-series_santricity_os_controller"},{"vendor":"netapp","product":"e-series_santricity_web_services"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"plug-in_for_symantec_netbackup"},{"vendor":"netapp","product":"santricity_unified_manager"},{"vendor":"netapp","product":"snapmanager"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"opensuse","product":"leap"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle","product":"openjdk"},{"vendor":"oracle corporation","product":"java"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200416-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4662","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4337-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2816","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wq43-mwf7-pm7c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-2816","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-2816","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1509","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823960","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1509.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2754","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2754","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2755","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2755","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2755","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2756","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2756","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2757","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2767","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2767","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2767","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2773","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2773","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2778","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2781","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2800","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2800","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2800","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2816","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2830","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1514","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1514.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1517","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1517.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201511-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1167462","tags":["report"]},{"url":"https://bugzilla.suse.com/1169511","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201511-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201572-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-2816","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4337-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-2754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2781","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2800","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2803","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2830","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SDEP4JPECWYIDSKVUAK7GXMXY4KKSX4F/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T13:29:47Z","modified":"2024-09-27T19:08:23.886Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:35:51.206854Z"}],"euvd":[{"id":"EUVD-2020-22609","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T13:29:47Z","modified":"2024-09-27T19:08:23Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:28:04.361618Z"}],"ghsa":[{"id":"GHSA-wq43-mwf7-pm7c","title":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2022-05-24T17:14:57Z","modified":"2023-01-27T05:02:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:42:07.495183Z"}],"nvd":[{"id":"CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T14:15:29.157Z","modified":"2026-06-17T03:13:00.393Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:59.125695Z"}],"osv":[{"id":"ALPINE-CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T14:15:29.157Z","modified":"2026-11-03T06:32:25.538580377Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T14:15:29.157Z","modified":"2026-10-24T10:31:03.516887714Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T14:15:29.157Z","modified":"2026-08-27T13:03:11.841019771Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"RHSA-2020:1509","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:45:40Z","modified":"2026-08-27T10:01:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:1514","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:45:49Z","modified":"2026-08-27T10:01:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:1517","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:45:57Z","modified":"2026-08-27T10:30:02.464051093Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2020-04-15T14:15:00Z","modified":"2026-02-04T03:37:21.410445Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"BIT-java-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2026-05-06T14:42:19.285Z","modified":"2026-09-08T08:48:23.301362757Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2026-05-06T14:42:22.061Z","modified":"2026-09-08T08:47:54.155366297Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2020-2816","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).","status":"published","published":"2026-05-08T05:43:46.43Z","modified":"2026-09-08T08:48:03.562765438Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"DSA-4662-1","title":"openjdk-11 - security update","status":"published","published":"2020-04-24T00:00:00Z","modified":"2026-03-09T02:09:08.354652Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2020:0757-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nJava was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).\n\nSecurity issues fixed:\n\n- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).\n- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).\n- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).\n- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).\n- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).\n- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).\n- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).\n- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-06-02T10:13:07Z","modified":"2026-02-04T04:15:09.503033Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10871-1","title":"java-11-openjdk-11.0.12.0-3.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:19.394894Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10872-1","title":"java-13-openjdk-13.0.8.0-3.1 on GA media","description":"These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:55.885522Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:1511-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nJava was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).\n\nSecurity issues fixed:\n\n- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).\n- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).\n- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).\n- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).\n- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).\n- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).\n- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).\n- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n","status":"published","published":"2020-05-29T16:04:13Z","modified":"2026-02-04T02:46:53.227585Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1511-2","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nJava was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).\n\nSecurity issues fixed:\n\n- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).\n- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).\n- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).\n- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).\n- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).\n- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).\n- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).\n- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n","status":"published","published":"2020-07-07T11:42:58Z","modified":"2026-02-04T02:42:48.8794Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1572-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nJava was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511).\n\nSecurity issues fixed:\n\n- CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2755: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2756: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n- CVE-2020-2757: Fixed an object deserialization issue that could have resulted in denial of service via crafted serialized input (bsc#1169511).\n- CVE-2020-2767: Fixed an incorrect handling of certificate messages during TLS handshakes (bsc#1169511).\n- CVE-2020-2773: Fixed the incorrect handling of exceptions thrown by unmarshalKeyInfo() and unmarshalXMLSignature() (bsc#1169511).\n- CVE-2020-2778: Fixed the incorrect handling of SSLParameters in setAlgorithmConstraints(), which could have been abused to override the defined systems security policy and lead to the use of weak crypto algorithms (bsc#1169511).\n- CVE-2020-2781: Fixed the incorrect re-use of single null TLS sessions (bsc#1169511).\n- CVE-2020-2800: Fixed an HTTP header injection issue caused by mishandling of CR/LF in header values (bsc#1169511).\n- CVE-2020-2803: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2805: Fixed a boundary check and type check issue that could have led to a sandbox bypass (bsc#1169511).\n- CVE-2020-2816: Fixed an incorrect handling of application data packets during TLS handshakes  (bsc#1169511).\n- CVE-2020-2830: Fixed an incorrect handling of regular expressions that could have resulted in denial of service (bsc#1169511).\n","status":"published","published":"2020-06-09T09:18:32Z","modified":"2026-02-04T03:28:30.094524Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4337-1","title":"openjdk-8, openjdk-lts vulnerabilities","description":"It was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice while processing a specially crafted regular expression.\n(CVE-2020-2754, CVE-2020-2755)\n\nIt was discovered that OpenJDK incorrectly handled class descriptors and\ncatching exceptions during object stream deserialization. An attacker could\npossibly use this issue to cause a denial of service while processing a\nspecially crafted serialized input. (CVE-2020-2756, CVE-2020-2757)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled certificate messages\nduring TLS handshake. An attacker could possibly use this issue to bypass\ncertificate verification and insert, edit or obtain sensitive information. This\nissue only affected OpenJDK 11. (CVE-2020-2767)\n\nIt was discovered that OpenJDK incorrectly handled exceptions thrown by\nunmarshalKeyInfo() and unmarshalXMLSignature(). An attacker could possibly use\nthis issue to cause a denial of service while reading key info or XML signature\ndata from XML input. (CVE-2020-2773)\n\nPeter Dettman discovered that OpenJDK incorrectly handled SSLParameters in\nsetAlgorithmConstraints(). An attacker could possibly use this issue to\noverride the defined systems security policy and lead to the use of weak\ncrypto algorithms that should be disabled. This issue only affected\nOpenJDK 11. (CVE-2020-2778)\n\nSimone Bordet discovered that OpenJDK incorrectly re-used single null TLS\nsessions for new TLS connections. A remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2020-2781)\n\nDan Amodio discovered that OpenJDK did not restrict the use of CR and LF\ncharacters in values for HTTP headers. An attacker could possibly use this\nissue to insert, edit or obtain sensitive information. (CVE-2020-2800)\n\nNils Emmerich discovered that OpenJDK incorrectly checked boundaries or\nargument types. An attacker could possibly use this issue to bypass sandbox\nrestrictions causing unspecified impact. (CVE-2020-2803, CVE-2020-2805)\n\nIt was discovered that OpenJDK incorrectly handled application data packets\nduring TLS handshake. An attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK 11.\n(CVE-2020-2816)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. (CVE-2020-2830)\n","status":"published","published":"2020-04-22T15:32:45Z","modified":"2026-02-10T04:41:48Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}