1. 主页
  2. 保安警报
  3. 保安警报 (A23-10-19)

保安警报 (A23-10-19): Oracle Java 及 Oracle 产品多个漏洞 (2023年10月)


 

发布日期: 2023年 10月 18日

  
  

描述:

Oracle 发布了重要修补程式更新公告，包括一系列应对 Java SE 和不同 Oracle 产品中多个保安漏洞的修补程式。有关安全性更新的列表，请参考以下网址：
https://www.oracle.com/security-alerts/cpuoct2023.html

 

受影响的系统:

  • Oracle Java SE
  • Database
  • Fusion Applications and Middleware
  • Oracle MySQL Product Suite
  • Oracle and Sun Systems Products Suite
  • Oracle Linux and Virtualization

有关受影响产品的完整列表，请参阅以下网址：
https://www.oracle.com/security-alerts/cpuoct2023.html

 

影响:

成功利用漏洞可在受影响的系统导致服务被拒绝、泄漏资讯、绕过保安限制、仿冒诈骗或篡改，视乎攻击者利用哪个漏洞而定。

 

建议:

现已有适用于受影响系统的修补程式。受影响系统的用户应遵从产品供应商的建议，立即采取行动以降低风险。

Oracle Java SE 产品的修补程式可从以下连结下载：

  • Java Platform SE 8u391 (JDK 及 JRE)
  • Java Platform SE 11.0.21 (JDK 及 JRE)
  • Java Platform SE 17.0.9 (JDK 及 JRE)
  • Java Platform SE 21.0.1 (JDK 及 JRE)

https://www.oracle.com/java/technologies/javase-downloads.html

OpenJDK 的修补程式可从以下连结下载：
https://jdk.java.net/

用户也可通过以下安全公告，以获取其他 Oracle 产品安全更新方面的资讯。
https://www.oracle.com/security-alerts/cpuoct2023.html

用户可联络其产品支援供应商，以取得修补程式及相关支援。

 

进一步资讯:

  • https://www.oracle.com/security-alerts/cpuoct2023.html
  • https://www.hkcert.org/tc/security-bulletin/oracle-products-multiple-vulnerabilities_20231018
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17498
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1953
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9492
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022 (to CVE-2020-11023)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11988
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25649
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28493
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24031
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28165
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33036
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36373 (to CVE-2021-36374)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37136
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37404
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37533
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37714
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41164 (to CVE-2021-41165)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41182 (to CVE-2021-41184)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41945
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42575
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43045
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3171
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4225
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4492
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23990
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24329
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24834
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24839
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25147
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25168
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25647
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26612
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27778 (to CVE-2022-27782)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29546
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29577
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29599
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30115
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31129
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33980
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36033
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36944
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37436
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40151 (to CVE-2022-40152)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40896 (to CVE-2022-40897)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41409
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41704
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41881
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41954
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41966
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003 (to CVE-2022-42004)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42890
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919 (to CVE-2022-42920)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44729 (to CVE-2022-44730)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45688
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46908
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48285
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0361
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464 (to CVE-2023-0466)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0567 (to CVE-2023-0568)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0662
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1255
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1370
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1436
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2975 (to CVE-2023-2976)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3247
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3635
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3823 (to CVE-2023-3824)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20860 (to CVE-2023-20863)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20873
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20883
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21829
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22015
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22019
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22025 (to CVE-2023-22026)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22028 (to CVE-2023-22029)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22032
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22043
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22059
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22064 (to CVE-2023-22115)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22117 (to CVE-2023-22119)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22121 (to CVE-2023-22130)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22946
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23914 (to CVE-2023-23916)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23931
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26048 (to CVE-2023-26049)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26604
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27522
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533 (to CVE-2023-27534)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319 (to CVE-2023-28322)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28439
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28708 (to CVE-2023-28709)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29402 (to CVE-2023-29405)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30535
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588 (to CVE-2023-30590)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30861
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33201
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34034 (to CVE-2023-34035)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34149
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34396
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34462
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34981
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35116
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35887
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36479
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36824
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38039
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38325
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 (to CVE-2023-38546)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39017
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39022
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40167
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41080
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41900
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42503


标签 : Oracle , Java , Oracle Database , Fusion , MySQL , Sun Systems , Oracle Linux
标签