CVE-2019-2602
java-1.8.0-openjdk: The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Develo...
CVE-2019-2602 is fixed in 38 products on 1 platform, first by openjdk-11-demo 11.0.3+7-1ubuntu2~18.04.1, released April 22, 2019. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0441
91st percentile
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022) (CVE-2019-2698) * OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936) (CVE-2019-2602) * OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453) (CVE-2019-2684) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| java-1.8.0-ibm · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-demo · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-devel · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-headless · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-jdbc · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-plugin · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-src · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-ibm-webstart · RHEL 8 | 1:1.8.0.5.35-3.el8_0 | RHSA-2019:1238 | May 16, 2019 |
| java-1.8.0-openjdk · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-accessibility · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-accessibility · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-demo · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-demo · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-devel · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-devel · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-headless · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-headless · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-javadoc · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-javadoc · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-javadoc-zip · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-javadoc-zip · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-1.8.0-openjdk-src · RHEL 8 | 1:1.8.0.212.b04-1.el8_0 | RHSA-2019:1146 | May 13, 2019 |
| java-1.8.0-openjdk-src · ol 8 | 1:1.8.0.212.b04-1.el8_0 | ELSA-2019-1146 | Jul 30, 2019 |
| java-11-openjdk · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-demo · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-demo · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-devel · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-devel · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-headless · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-headless · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-javadoc · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-javadoc · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-javadoc-zip · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-javadoc-zip · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-jmods · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-jmods · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| java-11-openjdk-src · RHEL 8 | 1:11.0.3.7-2.el8_0 | RHSA-2019:1518 | Jun 18, 2019 |
| java-11-openjdk-src · ol 8 | 1:11.0.3.7-2.0.1.el8_0 | ELSA-2019-1518 | Jul 30, 2019 |
| openjdk-11-demo · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-demo 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-jdk · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-jdk 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-jdk-headless · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-jdk-headless 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-jre · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-jre 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-jre-headless · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-jre-headless 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-jre-zero · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-jre-zero 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-11-source · Ubuntu 18.04.6 LTS (bionic) | 11.0.3+7-1ubuntu2~18.04.1 | openjdk-11-source 11.0.3+7-1ubuntu2~18.04.1 | Apr 22, 2019 |
| openjdk-8-demo · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-demo 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-jdk · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-jdk 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-jdk-headless · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-jdk-headless 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-jre · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-jre 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-jre-headless · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-jre-headless 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-jre-zero · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-jre-zero 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |
| openjdk-8-source · Ubuntu 18.04.6 LTS (bionic) | 8u212-b03-0ubuntu1.18.04.1 | openjdk-8-source 8u212-b03-0ubuntu1.18.04.1 | Apr 22, 2019 |