CVE-2020-14779

openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Serialization)

CVE-2020-14779 is fixed in 39 products on 1 platform, first by openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1, released October 21, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
3.7
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0376
89th percentile

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Serialization). Supported versions that are affected are JavaSE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult toexploit vulnerability allows unauthenticated attacker with network accessvia multiple protocols to compromise Java SE, Java SE Embedded. Successfulattacks of this vulnerability can result in unauthorized ability to cause apartial denial of service (partial DOS) of Java SE, Java SE Embedded. Note:Applies to client and server deployment of Java. This vulnerability can beexploited through sandboxed Java Web Start applications and sandboxed Javaapplets. It can also be exploited by supplying data to APIs in thespecified Component without using sandboxed Java Web Start applications orsandboxed Java applets, such as through a web service. CVSS 3.1 Base Score3.7 (Availability impacts). CVSS Vector:(CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Where it's fixed

ProductFixed inFixReleased
Linux
java-1.8.0-ibm · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-demo · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-devel · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-headless · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-jdbc · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-plugin · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-src · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-ibm-webstart · RHEL 8 1:1.8.0.6.20-1.el8_3 RHSA-2021:0530 Feb 16, 2021
java-1.8.0-openjdk · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-accessibility · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-accessibility · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-demo · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-demo · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-devel · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-devel · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-headless · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-headless · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-javadoc · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-javadoc · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-javadoc-zip · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-javadoc-zip · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-src · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-src · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-11-openjdk · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-demo · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-demo · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-devel · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-devel · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-headless · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-headless · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-javadoc · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-javadoc · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-javadoc-zip · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-javadoc-zip · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-jmods · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-jmods · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-src · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-src · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-static-libs · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-static-libs · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
openjdk-11-demo · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-demo · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-demo 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-demo · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-demo 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-demo · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-demo 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jdk 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jdk · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jdk 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jdk · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jdk 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jdk 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk-headless · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jdk-headless · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jdk-headless · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jdk-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk-headless · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jdk-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-headless · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre-headless 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre-headless · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre-headless 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre-headless · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-headless · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-zero · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre-zero 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre-zero · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre-zero 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre-zero · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre-zero 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-zero · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre-zero 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-source · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-source 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-source · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-source 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-source · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-source 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-source · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-source 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-8-demo · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-demo 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-demo · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-demo 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jdk · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jdk 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jdk · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jdk 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jdk-headless · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jdk-headless 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jdk-headless · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jdk-headless 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre-headless · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre-headless 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre-headless · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre-headless 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre-zero · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre-zero 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre-zero · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre-zero 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-source · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-source 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-source · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-source 8u272-b10-0ubuntu1~20.04 Oct 21, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.