CVE-2020-2654
openjdk-11-demo: Vulnerability in the Java SE product of Oracle Java SE (component:Libraries)
CVE-2020-2654 is fixed in 38 products on 1 platform, first by RHSA-2020:0128, released January 16, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
3.7
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0396
90th percentile
Vulnerability in the Java SE product of Oracle Java SE (component:Libraries). Supported versions that are affected are Java SE: 7u241, 8u231,11.0.5 and 13.0.1. Difficult to exploit vulnerability allowsunauthenticated attacker with network access via multiple protocols tocompromise Java SE. Successful attacks of this vulnerability can result inunauthorized ability to cause a partial denial of service (partial DOS) ofJava SE. Note: This vulnerability can only be exploited by supplying datato APIs in the specified Component without using Untrusted Java Web Startapplications or Untrusted Java applets, such as through a web service. CVSS3.0 Base Score 3.7 (Availability impacts). CVSS Vector:(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| java-1.8.0-ibm · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-demo · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-devel · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-headless · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-jdbc · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-plugin · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-src · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-ibm-webstart · RHEL 8 | 1:1.8.0.6.10-1.el8_2 | RHSA-2020:2241 | May 20, 2020 |
| java-1.8.0-openjdk · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-accessibility · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-accessibility · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-demo · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-demo · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-devel · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-devel · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-headless · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-headless · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-javadoc · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-javadoc · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-javadoc-zip · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-javadoc-zip · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-1.8.0-openjdk-src · RHEL 8 | 1:1.8.0.242.b08-0.el8_1 | RHSA-2020:0202 | Jan 24, 2020 |
| java-1.8.0-openjdk-src · ol 8 | 1:1.8.0.242.b08-0.el8_1 | ELSA-2020-0202 | Jan 22, 2020 |
| java-11-openjdk · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-demo · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-demo · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-devel · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-devel · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-headless · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-headless · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-javadoc · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-javadoc · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-javadoc-zip · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-javadoc-zip · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-jmods · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-jmods · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| java-11-openjdk-src · RHEL 8 | 1:11.0.6.10-0.el8_1 | RHSA-2020:0128 | Jan 16, 2020 |
| java-11-openjdk-src · ol 8 | 1:11.0.6.10-0.el8_1 | ELSA-2020-0128 | Jan 20, 2020 |
| openjdk-11-demo · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-demo 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-demo · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-demo 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-demo · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-demo 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-demo · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-demo 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jdk · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-jdk 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-jdk · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-jdk · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jdk · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jdk-headless · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-jdk-headless 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-jdk-headless · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk-headless 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-jdk-headless · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk-headless 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jdk-headless · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-jdk-headless 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-jre 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-jre · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-jre 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-jre · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-jre 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-jre 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre-headless · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-jre-headless 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-jre-headless · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-headless 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-jre-headless · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-headless 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre-headless · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-headless 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre-zero · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-jre-zero 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-jre-zero · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-zero 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-jre-zero · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-zero 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-jre-zero · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-jre-zero 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-source · Ubuntu 18.04.6 LTS (bionic) | 11.0.6+10-1ubuntu1~18.04.1 | openjdk-11-source 11.0.6+10-1ubuntu1~18.04.1 | Jan 26, 2020 |
| openjdk-11-source · Ubuntu 20.04 LTS (focal) | 11.0.6+10-1ubuntu1 | openjdk-11-source 11.0.6+10-1ubuntu1 | Jan 26, 2020 |
| openjdk-11-source · Ubuntu 24.10 (oracular) | 11.0.6+10-1ubuntu1 | openjdk-11-source 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-11-source · Ubuntu 25.04 (plucky) | 11.0.6+10-1ubuntu1 | openjdk-11-source 11.0.6+10-1ubuntu1 | Jan 16, 2026 |
| openjdk-8-demo · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-demo 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-jdk · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-jdk 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-jdk-headless · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-jdk-headless 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-jre · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-jre 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-jre-headless · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-jre-headless 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-jre-zero · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-jre-zero 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
| openjdk-8-source · Ubuntu 18.04.6 LTS (bionic) | 8u242-b08-0ubuntu3~18.04 | openjdk-8-source 8u242-b08-0ubuntu3~18.04 | Jan 26, 2020 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.