1. 主頁
  2. 保安警報
  3. 保安警報 (A23-04-13)

保安警報 (A23-04-13): Oracle Java 及 Oracle 產品多個漏洞 (2023年4月)


 

發布日期: 2023年 4月 19日

  
  

描述:

Oracle 發布了重要修補程式更新公告，包括一系列應對 Java SE 和不同 Oracle 產品中多個保安漏洞的修補程式。有關安全性更新的列表，請參考以下網址：
https://www.oracle.com/security-alerts/cpuapr2023.html

 

受影響的系統:

  • Oracle Java SE
  • Database
  • Fusion Applications and Middleware
  • Oracle MySQL Product Suite
  • NoSQL Database
  • Oracle and Sun Systems Products Suite
  • Oracle Linux and Virtualization

有關受影響產品的完整列表，請參閱以下網址：
https://www.oracle.com/security-alerts/cpuapr2023.html

 

影響:

成功利用漏洞可在受影響的系統導致數據操縱、服務被拒絕、泄漏資訊或繞過保安限制，視乎攻擊者利用哪個漏洞而定。

 

建議:

現已有適用於受影響系統的修補程式。受影響系統的用戶應遵從產品供應商的建議，立即採取行動以降低風險。

Oracle Java SE 產品的修補程式可從以下連結下載：

  • Java Platform SE 8u371 (JDK 及 JRE)
  • Java Platform SE 11.0.19 (JDK 及 JRE)
  • Java Platform SE 17.0.7 (JDK 及 JRE)
  • Java Platform SE 20.0.1 (JDK 及 JRE)

https://www.oracle.com/java/technologies/javase-downloads.html

OpenJDK 的修補程式可從以下連結下載：
https://jdk.java.net/

用戶也可通過以下安全公告，以獲取其他 Oracle 產品安全更新方面的資訊。
https://www.oracle.com/security-alerts/cpuapr2023.html

用戶可聯絡其產品支援供應商，以取得修補程式及相關支援。

 

進一步資訊:

  • https://www.oracle.com/security-alerts/cpuapr2023.html
  • https://www.hkcert.org/tc/security-bulletin/oracle-products-multiple-vulnerabilities_20230419
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1311
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14371
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000656
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11287
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12415
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18935
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6950
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7009
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7712
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11987 (to CVE-2020-11988)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13936
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13954
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14343
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17521
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25638
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25649
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28052
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35168 (to CVE-2020-35169)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-2351
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4048
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22569
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23017
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23413
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23926
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27568
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30129
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31684
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34798
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35043
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36090
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36373 (to CVE-2021-36374)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37519
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37533
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37695
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41183 (to CVE-2021-41184)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41973
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42575
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43859
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44832
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46848
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1587
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2048
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2274
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3171
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3479
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4415
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21824
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22965
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22971
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22978 (to CVE-2022-22979)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23181
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23305
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23437
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23457
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24729
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24839
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25315
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25647
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25857
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28199
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28327
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28738
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29577
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29599
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31081
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31123
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31129
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31630
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31692
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32215
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33980
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34169
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34305
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35737
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36033
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37865
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38752
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39271
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40146
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40149
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40151 (to CVE-2022-40152)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40304
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41881
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41966
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003 (to CVE-2022-42004)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42252
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42889 (to CVE-2022-42890)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42916
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43401 (to CVE-2022-43402)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43548
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45047
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45143
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45685
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45693
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46364
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46908
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0361
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0662
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1370
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21896
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21902 (to CVE-2023-21913)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21915 (to CVE-2023-21948)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21952 (to CVE-2023-21956)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21959 (to CVE-2023-21960)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21962 (to CVE-2023-21973)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21976 (to CVE-2023-21982)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21984 (to CVE-2023-21993)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21996 (to CVE-2023-22003)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22899
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23916
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23931
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25136
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25194
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25577
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25613
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28708


標籤 : Oracle , Java , Oracle Database , Fusion , MySQL , Oracle NoSQL , Sun Systems , Oracle Linux
標籤