The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0107-1 advisory.

    - Update to Java 8.0 Service Refresh 7 Fix Pack 0
    - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for     MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052)
    - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914)
    - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913)
    - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911)
    - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910)
    - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909)
    - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905)
    - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564)
    - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565)
    - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055)
    - CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902)
    - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2022:0107-1)

critical Nessus Plugin ID 156813

Version 1.9