> oracle graalvm enterprise edition 安全漏洞

oracle graalvm enterprise edition 安全漏洞

CNNVD-ID编号	CNNVD-202001-681	CVE编号	CVE-2020-2604
发布时间	2020-01-15	更新时间	2021-02-04
漏洞类型	其他	漏洞来源	Ubuntu,Debian,Red Hat,Gentoo
危险等级	高危	威胁类型	远程
厂商	N/A

漏洞介绍

Oracle GraalVM是美国甲骨文（Oracle）公司的一套使用Java语言编写的即时编译器。该产品支持多种编程语言和执行模式。

Oracle GraalVM中的GraalVM Enterprise Edition 19.3.0.2版本的Java组件存在安全漏洞。攻击者可利用该漏洞控制Oracle GraalVM Enterprise Edition，影响数据的保密性、完整性和可用性。

漏洞补丁

目前厂商已发布升级了oracle graalvm enterprise edition 安全漏洞的补丁，oracle graalvm enterprise edition 安全漏洞的补丁获取链接：

https://www.oracle.com/security-alerts/cpujan2020.html

参考网址

来源:DEBIAN

链接：https://www.debian.org/security/2020/dsa-4605

来源:CONFIRM

链接：https://kc.mcafee.com/corporate/index?page=content&id=SB10315

来源:www.oracle.com

链接：https://www.oracle.com/security-alerts/cpujan2020.html

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0468

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0467

来源:CONFIRM

链接：https://security.netapp.com/advisory/ntap-20200122-0003/

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0128

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0469

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0541

来源:MLIST

链接：https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0122

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0202

来源:DEBIAN

链接：https://www.debian.org/security/2020/dsa-4621

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0465

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2020/Feb/22

来源:BUGTRAQ

链接：https://seclists.org/bugtraq/2020/Jan/24

来源:GENTOO

链接：https://security.gentoo.org/glsa/202101-19

来源:SUSE

链接：http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0196

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0470

来源:UBUNTU

链接：https://usn.ubuntu.com/4257-1/

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0231

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0632

来源:REDHAT

链接：https://access.redhat.com/errata/RHSA-2020:0232

来源:lists.debian.org

链接：https://lists.debian.org/debian-security-announce/2020/msg00024.html

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0470

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0469

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0468

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0467

来源:www.ibm.com

链接：https://www.ibm.com/support/pages/node/1592049

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0157

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0465

来源:access.redhat.com

链接：https://access.redhat.com/errata/RHSA-2020:0128

来源:www.suse.com

链接：https://www.suse.com/support/update/announcement/2020/suse-su-20200140-1.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-cloud-private/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-rational-asset-analyzer/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/156002/Debian-Security-Advisory-4605-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0744/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-sdk-java-technology-edition-quarterly-cpu-jan-2020/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-wiotp-messagegateway-cve-2020-2604-cve-2020-2659/

来源:www.oracle.com

链接：https://www.oracle.com/security-alerts/cpujan2020verbose.html

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/156779/Red-Hat-Security-Advisory-2020-0856-01.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0215/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-3/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-ibm-java-runtime-vulnerabilities-affect-ibm-sterling-connectdirect-browser/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0962/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0477/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/156363/Debian-Security-Advisory-4621-1.html

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0550/

来源:nvd.nist.gov

链接：https://nvd.nist.gov/vuln/detail/CVE-2020-2604

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.1162/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/155975/Red-Hat-Security-Advisory-2020-0122-01.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-directory-server/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affects-ibm-agile-lifecycle-manager/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0618/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-watson-machine-learning-service-is-impacted-by-security-vulnerabilities-in-openjdk-11/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0642/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0674/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/161088/Gentoo-Linux-Security-Advisory-202101-19.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-liberty-for-java-for-ibm-cloud-january-2020-cpu/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affecting-rational-functional-tester/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0185/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0492/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-discovery-for-ibm-cloud-pak-for-data-affected-by-vulnerability-in-java/

来源:vigilance.fr

链接：https://vigilance.fr/vulnerability/Oracle-Java-vulnerabilities-of-January-2020-31331

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.1698/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-insights/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-identified-in-ibm-java-sdk-that-affect-ibm-security-directory-suite-january-2020-cpu/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-cognos-command-center-2/

来源:www.nsfocus.net

链接：http://www.nsfocus.net/vulndb/46327

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnurabilities-discovered-in-ibm-sdk-java-can-affect-rational-software-architect-design-manager/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0205/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0479/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-security-vulnerabilities-in-ibm-java-sdk-oct-2019-and-jan-2020-cpu-affect-multiple-ibm-continuous-engineering-products-based-on-ibm-jazz-technology/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0863/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/156012/Red-Hat-Security-Advisory-2020-0157-01.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-itcam-for-soa-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-txseries-for-multiplatforms/

来源:packetstormsecurity.com

链接：https://packetstormsecurity.com/files/156121/Ubuntu-Security-Notice-USN-4257-1.html

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-sdk-java-technology-edition-affect-ibm-operational-decision-manager-october-2019-january-2020-and-april-2020-cpus/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-java-vulnerabilities-affect-ibm-spectrum-protect-plus/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.1451/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-spectrum-conductor-and-ibm-spectrum-conductor-with-spark/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-websphere-message-broker-v8-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-in-ibm-java-sdk-affects-ibm-voice-gateway/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0465.2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-performance-management-products-4/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-4/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-and-ibm-java-runtime-that-affect-ibm-intelligent-operations-center-products-includes-oracle-jan-2020-cpu-m/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-quarterly-cpu-jan-2020-apr-2020/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0531/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0753/

来源:www.auscert.org.au

链接：https://www.auscert.org.au/bulletins/ESB-2020.0672/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-storediq-instascan/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-middleware-software-affect-ibm-cloud-pak-for-automation-2/

来源:www.ibm.com

链接：https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-runtime-affect-ibm-connectdirect-web-service/

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202001-681