1. 主頁
  2. 保安警報
  3. 保安警報 (A23-10-19)

保安警報 (A23-10-19): Oracle Java 及 Oracle 產品多個漏洞 (2023年10月)


 

發布日期: 2023年 10月 18日

  
  

描述:

Oracle 發布了重要修補程式更新公告，包括一系列應對 Java SE 和不同 Oracle 產品中多個保安漏洞的修補程式。有關安全性更新的列表，請參考以下網址：
https://www.oracle.com/security-alerts/cpuoct2023.html

 

受影響的系統:

  • Oracle Java SE
  • Database
  • Fusion Applications and Middleware
  • Oracle MySQL Product Suite
  • Oracle and Sun Systems Products Suite
  • Oracle Linux and Virtualization

有關受影響產品的完整列表，請參閱以下網址：
https://www.oracle.com/security-alerts/cpuoct2023.html

 

影響:

成功利用漏洞可在受影響的系統導致服務被拒絕、泄漏資訊、繞過保安限制、仿冒詐騙或篡改，視乎攻擊者利用哪個漏洞而定。

 

建議:

現已有適用於受影響系統的修補程式。受影響系統的用戶應遵從產品供應商的建議，立即採取行動以降低風險。

Oracle Java SE 產品的修補程式可從以下連結下載：

  • Java Platform SE 8u391 (JDK 及 JRE)
  • Java Platform SE 11.0.21 (JDK 及 JRE)
  • Java Platform SE 17.0.9 (JDK 及 JRE)
  • Java Platform SE 21.0.1 (JDK 及 JRE)

https://www.oracle.com/java/technologies/javase-downloads.html

OpenJDK 的修補程式可從以下連結下載：
https://jdk.java.net/

用戶也可通過以下安全公告，以獲取其他 Oracle 產品安全更新方面的資訊。
https://www.oracle.com/security-alerts/cpuoct2023.html

用戶可聯絡其產品支援供應商，以取得修補程式及相關支援。

 

進一步資訊:

  • https://www.oracle.com/security-alerts/cpuoct2023.html
  • https://www.hkcert.org/tc/security-bulletin/oracle-products-multiple-vulnerabilities_20231018
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10086
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17498
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20916
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1953
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9492
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022 (to CVE-2020-11023)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11988
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25649
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28493
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24031
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28165
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33036
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36373 (to CVE-2021-36374)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37136
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37404
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37533
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37714
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41164 (to CVE-2021-41165)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41182 (to CVE-2021-41184)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41945
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42575
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43045
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3171
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4225
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4492
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4899
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23990
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24329
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24407
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24834
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24839
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25147
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25168
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25647
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26612
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27778 (to CVE-2022-27782)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29546
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29577
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29599
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30115
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31129
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33980
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36033
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36944
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37436
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37454
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40151 (to CVE-2022-40152)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40896 (to CVE-2022-40897)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40982
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41409
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41704
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41881
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41954
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41966
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003 (to CVE-2022-42004)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42890
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42898
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42919 (to CVE-2022-42920)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43551
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43680
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44729 (to CVE-2022-44730)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45688
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46908
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48285
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0361
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464 (to CVE-2023-0466)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0567 (to CVE-2023-0568)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0662
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1255
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1370
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1436
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2002
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2283
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2603
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2975 (to CVE-2023-2976)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3090
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3247
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3390
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3635
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3776
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3823 (to CVE-2023-3824)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4004
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4039
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20593
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20860 (to CVE-2023-20863)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20873
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20883
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-21829
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22015
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22019
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22025 (to CVE-2023-22026)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22028 (to CVE-2023-22029)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22032
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22043
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22059
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22064 (to CVE-2023-22115)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22117 (to CVE-2023-22119)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22121 (to CVE-2023-22130)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22946
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23914 (to CVE-2023-23916)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23931
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25690
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26048 (to CVE-2023-26049)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26604
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27522
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27533 (to CVE-2023-27534)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28319 (to CVE-2023-28322)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28439
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28484
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28708 (to CVE-2023-28709)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29402 (to CVE-2023-29405)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29469
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30535
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30585
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30588 (to CVE-2023-30590)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30861
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33201
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34034 (to CVE-2023-34035)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34149
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34396
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34462
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34981
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35001
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35116
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35788
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35887
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36479
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36824
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38039
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38325
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38408
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38545 (to CVE-2023-38546)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39017
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39022
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40167
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41080
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-41900
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42503


標籤 : Oracle , Java , Oracle Database , Fusion , MySQL , Sun Systems , Oracle Linux
標籤