5
CVSSv2

CVE-2020-2781

Published: 15/04/2020 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

It exists that OpenJDK incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service while processing a specially crafted regular expression. (CVE-2020-2754, CVE-2020-2755)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle jdk 14.0.0

oracle jre 14.0.0

oracle jdk 11.0.6

oracle jre 11.0.6

oracle jdk 1.8.0

oracle jdk 1.7.0

oracle jre 1.8.0

oracle jre 1.7.0

oracle openjdk 8

oracle openjdk 7

oracle openjdk 14

oracle openjdk

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

canonical ubuntu linux 18.04

canonical ubuntu linux 19.10

canonical ubuntu linux 16.04

opensuse leap 15.1

opensuse leap 15.2

fedoraproject fedora 30

fedoraproject fedora 31

fedoraproject fedora 32

mcafee threat intelligence exchange server 3.0.0

mcafee threat intelligence exchange server 2.3.1

mcafee threat intelligence exchange server 2.0.0

mcafee threat intelligence exchange server 2.0.1

mcafee threat intelligence exchange server 2.1.0

mcafee threat intelligence exchange server 2.1.1

mcafee threat intelligence exchange server 2.2.0

mcafee threat intelligence exchange server 2.3.0

netapp cloud backup -

netapp steelstore cloud integrated storage -

netapp snapmanager -

netapp oncommand workflow automation -

netapp storagegrid -

netapp storagegrid

netapp oncommand insight -

netapp active iq unified manager

netapp santricity unified manager -

netapp e-series performance analyzer -

netapp e-series santricity web services -

netapp 7-mode transition tool -

netapp cloud secure agent -

netapp e-series santricity os controller

Vendor Advisories

Several security issues were fixed in OpenJDK ...
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks For the oldstable distribution (stretch), these problems have been fixed in version 8u252-b09-1~deb9u1 We recommend that you upgrade your openjdk-8 pac ...
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictions or HTTP response splitting attacks For the stable distribution (buster), these problems have been fixed in version 1107+10-3~deb10u1 We recommend that you upgrade your openjdk-11 packa ...
Synopsis Important: java-180-ibm security update Type/Severity Security Advisory: Important Topic An update for java-180-ibm is now available for Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scori ...
Synopsis Moderate: OpenShift Container Platform 443 presto-container security update Type/Severity Security Advisory: Moderate Topic An update for presto-container is now available for Red Hat OpenShift Container Platform 44Red Hat Product Security has rated this update as having a security impact of Mo ...
Synopsis Important: java-180-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-180-openjdk is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...
Synopsis Important: java-11-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...
Synopsis Important: java-180-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-180-openjdk is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...
Synopsis Important: java-180-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-180-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...
Synopsis Important: java-171-ibm security update Type/Severity Security Advisory: Important Topic An update for java-171-ibm is now available for Red Hat Enterprise Linux 7 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scori ...
Synopsis Important: java-171-ibm security update Type/Severity Security Advisory: Important Topic An update for java-171-ibm is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scori ...
Synopsis Important: java-180-ibm security update Type/Severity Security Advisory: Important Topic An update for java-180-ibm is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...
Synopsis Important: java-170-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-170-openjdk is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...
Synopsis Important: java-170-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-170-openjdk is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Sys ...
Synopsis Important: java-180-ibm security update Type/Severity Security Advisory: Important Topic An update for java-180-ibm is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scori ...
Synopsis Important: java-180-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-180-openjdk is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important ...
Synopsis Moderate: OpenShift Container Platform 443 hadoop-container security update Type/Severity Security Advisory: Moderate Topic An update for hadoop-container is now available for Red Hat OpenShift Container Platform 44Red Hat Product Security has rated this update as having a security impact of Mo ...
Synopsis Important: java-11-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-11-openjdk is now available for Red Hat Enterprise Linux 80 Update Services for SAP SolutionsRed Hat Product Security has rated this update as having a security impact of Important A Co ...
Synopsis Important: java-11-openjdk security update Type/Severity Security Advisory: Important Topic An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Supported versions that are affected are Java SE: 8u241, 1106 and 14; Java SE Embedded: 8u241 Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded Succe ...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Supported versions that are affected are Java SE: 7u251, 8u241, 1106 and 14; Java SE Embedded: 8u241 Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embe ...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Supported versions that are affected are Java SE: 7u251, 8u241, 1106 and 14; Java SE Embedded: 8u241 Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embe ...
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Supported versions that are affected are Java SE: 7u251, 8u241, 1106 and 14; Java SE Embedded: 8u241 Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embe ...
Further information about this update can be found in the Corretto 11 change log (githubcom/corretto/corretto-11/blob/develop/CHANGELOGmd) ...
Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center CVE-2020-2754, CVE-2020-2755, CVE-2020-2756, CVE-2020-2757, CVE-2020-2767, CVE-2020-2773, CVE-2020-2778, CVE-2020-2781, CVE-2020-2800, CVE-2020-2803, CVE-20 ...
Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the following vulnerabilities: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756, CVE-2020-2757, CVE-2020-2767, CVE-2020-2773, CVE-2020-2778, CVE-2020-2781, CVE-2020-2800, CVE-2020-2803, CVE-2020-2805, CVE-2020-2816, CVE-2020-2830 Affected products and versions are ...