Detections
Analytics
Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2024-009)
high Nessus Plugin ID 189163
Language:
Synopsis
The remote Amazon Linux 2 host is missing a security update.Description
The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0_402.b06-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2CORRETTO8-2024-009 advisory.- 2024-05-03: The severity of this advisory has been changed from important to low. 2024-05-02:
CVE-2024-20918 was removed from this advisory. 2024-05-02: CVE-2024-20919 was removed from this advisory.
2024-05-02: CVE-2024-20921 was removed from this advisory. 2024-05-02: CVE-2024-20926 was removed from this advisory. 2024-05-02: CVE-2024-20945 was removed from this advisory. 2024-05-02: CVE-2024-20952 was removed from this advisory. (ALAS2CORRETTO8-2024-009)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Run 'yum update java-1.8.0-amazon-corretto' to update your system.See Also
Plugin Details
Severity: High
ID: 189163
File Name: al2_ALASCORRETTO8-2024-009.nasl
Version: 1.2
Type: local
Agent: unix
Published: 1/18/2024
Updated: 5/3/2024
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Vulnerability Information
CPE: p-cpe:/a:amazon:linux:java-1.8.0-amazon-corretto, p-cpe:/a:amazon:linux:java-1.8.0-amazon-corretto-devel, cpe:/o:amazon:linux:2
Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 1/17/2024
Vulnerability Publication Date: 1/16/2024