CVE-2019-2745
First published: Tue Jul 16 2019(Updated: )
Last updated 24 July 2024
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle JDK 6 | =1.7.0-update221 | |
| Oracle JDK 6 | =1.8.0-update212 | |
| Oracle JDK 6 | =11.0.3 | |
| Oracle Java Runtime Environment (JRE) | =1.7.0-update221 | |
| Oracle Java Runtime Environment (JRE) | =1.8.0-update212 | |
| Oracle Java Runtime Environment (JRE) | =11.0.3 | |
| Debian GNU/Linux | =8.0 | |
| Ubuntu Linux | =16.04 | |
| openSUSE | =15.0 | |
| openSUSE | =15.1 | |
| Trellix ePolicy Orchestrator | =5.9.0 | |
| Trellix ePolicy Orchestrator | =5.9.1 | |
| Trellix ePolicy Orchestrator | =5.10.0 | |
| Trellix ePolicy Orchestrator | =5.10.0-update_1 | |
| Trellix ePolicy Orchestrator | =5.10.0-update_2 | |
| Trellix ePolicy Orchestrator | =5.10.0-update_3 | |
| Trellix ePolicy Orchestrator | =5.10.0-update_4 | |
| hp xp7 command view | <8.7.0-00 | |
| debian/openjdk-11 | 11.0.24+8-2~deb11u1 11.0.26+4-1~deb11u1 11.0.26+4-1 | |
| debian/openjdk-8 | 8u442-ga-2 | |
| Debian | =8.0 | |
| Ubuntu | =16.04 | |
| HP P9000 Command View Advanced Edition Software | <8.7.0-00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10300
- https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
- https://usn.ubuntu.com/4080-1/
- https://kc.mcafee.com/corporate/index?page=content&id=SB10300
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
- https://launchpad.net/bugs/cve/CVE-2019-2745
- https://bugs.openjdk.java.net/browse/JDK-8208698
- http://hg.openjdk.java.net/jdk/jdk/rev/752e57845ad2
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2019:1817
- https://access.redhat.com/errata/RHSA-2019:1810
- https://access.redhat.com/errata/RHSA-2019:1811
- https://access.redhat.com/errata/RHSA-2019:1815
- https://access.redhat.com/errata/RHSA-2019:1816
- https://access.redhat.com/errata/RHSA-2019:1840
- https://access.redhat.com/errata/RHSA-2019:1839
- http://hg.openjdk.java.net/jdk-updates/jdk11u/rev/640251cdca05
- http://hg.openjdk.java.net/jdk-updates/jdk11u/rev/542feedcfedd
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/9b5707865a97
- http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/7fdd0d6ef2d3
- https://bugzilla.redhat.com/show_bug.cgi?id=1730411
- https://security-tracker.debian.org/tracker/CVE-2019-2745
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2745
- https://nvd.nist.gov/vuln/detail/CVE-2019-2745
- https://ubuntu.com/security/CVE-2019-2745
Frequently Asked Questions
What is the severity of CVE-2019-2745?
CVE-2019-2745 has a severity of medium.
Which versions of Java SE are affected by CVE-2019-2745?
Java SE versions 7u221, 8u212, and 11.0.3 are affected by CVE-2019-2745.
How can an unauthenticated attacker exploit CVE-2019-2745?
CVE-2019-2745 allows an unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java.
What is the remedy for CVE-2019-2745 in openjdk-11 package (Debian)?
The recommended remedy for CVE-2019-2745 in the openjdk-11 package (Debian) is to update to version 11.0.16+8-1~deb10u1 or higher.
How can I protect my system from CVE-2019-2745?
To protect your system from CVE-2019-2745, update your Java SE installation to a version that is not affected by the vulnerability.
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-2745
- agent/severity
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/remedy
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/oracle
- canonical/oracle jdk 6
- version/oracle jdk 6/1.7.0-update221
- version/oracle jdk 6/1.8.0-update212
- version/oracle jdk 6/11.0.3
- canonical/oracle java runtime environment (jre)
- version/oracle java runtime environment (jre)/1.7.0-update221
- version/oracle java runtime environment (jre)/1.8.0-update212
- version/oracle java runtime environment (jre)/11.0.3
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/8.0
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/16.04
- vendor/opensuse
- canonical/opensuse
- version/opensuse/15.0
- version/opensuse/15.1
- vendor/mcafee
- canonical/trellix epolicy orchestrator
- version/trellix epolicy orchestrator/5.9.0
- version/trellix epolicy orchestrator/5.9.1
- version/trellix epolicy orchestrator/5.10.0
- version/trellix epolicy orchestrator/5.10.0-update_1
- version/trellix epolicy orchestrator/5.10.0-update_2
- version/trellix epolicy orchestrator/5.10.0-update_3
- version/trellix epolicy orchestrator/5.10.0-update_4
- vendor/hp
- canonical/hp xp7 command view
- package-manager/debian
- canonical/debian
- version/debian/8.0
- canonical/ubuntu
- version/ubuntu/16.04
- canonical/hp p9000 command view advanced edition software