Search for packages
| purl | pkg:rpm/redhat/java-1.6.0-openjdk@1:1.6.0.0-1.2.b09?arch=el5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1c8j-4sxr-sqen
Aliases: CVE-2009-2672 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-1kst-h6d9-tubd
Aliases: CVE-2009-2674 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-2gpd-vwgb-67cn
Aliases: CVE-2009-2625 GHSA-334p-wv2m-w3vp |
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework. | There are no reported fixed by versions. |
|
VCID-52v7-ahwt-n7bj
Aliases: CVE-2009-2675 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-jgc1-svry-fufd
Aliases: CVE-2009-2673 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-kh2a-vqze-rfcw
Aliases: CVE-2009-2690 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-rbap-5tnp-x3a7
Aliases: CVE-2009-2689 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-u26k-fk31-wbfc
Aliases: CVE-2009-2475 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-xt9m-tfuj-6uht
Aliases: CVE-2009-2670 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-ypf2-kcj7-hfh5
Aliases: CVE-2009-2671 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
|
VCID-z7ht-bq8z-3qgd
Aliases: CVE-2009-0217 GHSA-8hfm-837h-hjg5 |
XML signature HMAC truncation authentication bypass This package uses a parameter that defines an HMAC truncation length (`HMACOutputLength`) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits. | There are no reported fixed by versions. |
|
VCID-zy35-gkjy-tbfw
Aliases: CVE-2009-2476 |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks, including the remote execution of arbitrary code. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||