CVE-2019-2996
First published: Tue Oct 15 2019(Updated: )
An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and no availability impact.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10 | 1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10 |
| redhat/java | <1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7 | 1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7 |
| redhat/java | <1.8.0-ibm-1:1.8.0.6.0-3.el8_1 | 1.8.0-ibm-1:1.8.0.6.0-3.el8_1 |
| IBM Engineering Requirements Quality Assistant | <=All | |
| Oracle OpenJDK 1.8.0 | =1.8.0-update221 | |
| Oracle JRE | =1.8.0-update221 | |
| NetApp E-Series SANtricity OS Controller | >=11.0.0<=11.50.2 | |
| NetApp SANtricity Storage Manager | ||
| NetApp SANtricity Unified Manager | ||
| NetApp E-Series SANtricity Web Services | ||
| NetApp OnCommand Workflow Automation | ||
| NetApp SnapManager for Oracle | ||
| NetApp SnapManager for SAP | ||
| Red Hat Satellite | =5.8 | |
| Red Hat Enterprise Linux | =8.0 | |
| Red Hat Enterprise Linux Desktop | =6.0 | |
| Red Hat Enterprise Linux Desktop | =7.0 | |
| Red Hat Enterprise Linux Server EUS | =8.1 | |
| Red Hat Enterprise Linux Server EUS | =8.6 | |
| Red Hat Enterprise Linux Server | =6.0 | |
| Red Hat Enterprise Linux Server | =7.0 | |
| Red Hat Enterprise Linux Workstation | =6.0 | |
| Red Hat Enterprise Linux Workstation | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2019-2996 https://nvd.nist.gov/vuln/detail/CVE-2019-2996 https://www.oracle.com/security-alerts/cpuoct2019.html#AppendixJAVA
- https://bugzilla.redhat.com/show_bug.cgi?id=1778942
- https://access.redhat.com/errata/RHSA-2019:4113
- https://access.redhat.com/errata/RHSA-2019:4115
- https://access.redhat.com/errata/RHSA-2020:0046
- https://access.redhat.com/errata/RHSA-2020:0006
- https://access.redhat.com/security/cve/CVE-2019-2996
- https://www.oracle.com/security-alerts/cpuoct2019.html#AppendixJAVA
- https://access.redhat.com/security/cve/cve-2019-2996
- http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://security.netapp.com/advisory/ntap-20191017-0001/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/169302
- https://www.ibm.com/support/pages/node/6398724 (Advisory)
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is CVE-2019-2996?
CVE-2019-2996 is a vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE that allows an unauthenticated attacker with network access to compromise the Java SE Deployment component.
How severe is CVE-2019-2996?
CVE-2019-2996 has a severity level of medium (4) according to the Common Vulnerability Scoring System (CVSS).
What software versions are affected by CVE-2019-2996?
The affected software versions are Java SE 8u221 and Java SE Embedded 8u221.
How can I fix CVE-2019-2996?
To fix CVE-2019-2996, update your Java SE or Java SE Embedded to version 8u221.
Where can I find more information about CVE-2019-2996?
You can find more information about CVE-2019-2996 on the following references: [https://access.redhat.com/security/cve/CVE-2019-2996](https://access.redhat.com/security/cve/CVE-2019-2996), [https://www.oracle.com/security-alerts/cpuoct2019.html#AppendixJAVA](https://www.oracle.com/security-alerts/cpuoct2019.html#AppendixJAVA), [https://access.redhat.com/errata/RHSA-2019:4113](https://access.redhat.com/errata/RHSA-2019:4113)
- collector/redhat-cve
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-2996
- agent/type
- agent/author
- agent/severity
- agent/remedy
- agent/description
- agent/references
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- package-manager/redhat
- vendor/ibm
- canonical/ibm engineering requirements quality assistant
- version/ibm engineering requirements quality assistant/all
- vendor/oracle
- canonical/oracle openjdk 1.8.0
- version/oracle openjdk 1.8.0/1.8.0-update221
- canonical/oracle jre
- version/oracle jre/1.8.0-update221
- vendor/netapp
- canonical/netapp e-series santricity os controller
- version/netapp e-series santricity os controller/11.0.0
- version/netapp e-series santricity os controller/11.50.2
- canonical/netapp santricity storage manager
- canonical/netapp santricity unified manager
- canonical/netapp e-series santricity web services
- canonical/netapp oncommand workflow automation
- canonical/netapp snapmanager for oracle
- canonical/netapp snapmanager for sap
- vendor/redhat
- canonical/red hat satellite
- version/red hat satellite/5.8
- canonical/red hat enterprise linux
- version/red hat enterprise linux/8.0
- canonical/red hat enterprise linux desktop
- version/red hat enterprise linux desktop/6.0
- version/red hat enterprise linux desktop/7.0
- canonical/red hat enterprise linux server eus
- version/red hat enterprise linux server eus/8.1
- version/red hat enterprise linux server eus/8.6
- canonical/red hat enterprise linux server
- version/red hat enterprise linux server/6.0
- version/red hat enterprise linux server/7.0
- canonical/red hat enterprise linux workstation
- version/red hat enterprise linux workstation/6.0
- version/red hat enterprise linux workstation/7.0