Bo Zhang

**Name of the Vulnerable Software and Affected Versions** Java SE versions 7u241, 8u231, 11.0.5, and 13.0.1 **Description** The issue is related to inadequate access control in the Libraries component of Oracle Java SE, which can be exploited by an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service. This can result in unauthorized ability to compromise Java SE, leading to a low availability impact. The vulnerability can only be exploited by supplying data to APIs in the specified component without using untrusted applications or applets. **Recommendations** For Java SE version 7u241, update to a version that fixes this issue. For Java SE version 8u231, update to a version that fixes this issue. For Java SE version 11.0.5, update to a version that fixes this issue. For Java SE version 13.0.1, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the Libraries component until a patch is available. Avoid using APIs in the Libraries component without proper validation and sanitization of input data.

**Name of the Vulnerable Software and Affected Versions** Oracle Siebel CRM Siebel UI Framework versions 19.10 and prior **Description** The issue is related to insufficient access control in the EAI component of the Siebel UI Framework. It allows an unauthenticated attacker with network access via HTTP to compromise the Siebel UI Framework, resulting in unauthorized read access to a subset of accessible data. **Recommendations** For versions 19.10 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.13.3 **Description** A security issue was found in the nl80211 set rekey data() function, which does not check for required attributes in a Netlink request. This request can be issued by a user with the CAP NET ADMIN capability, potentially resulting in a NULL pointer dereference and system crash. **Recommendations** For Linux kernel versions prior to 4.13.3, consider updating to a version that includes the fix for this issue to prevent potential system crashes. As a temporary workaround, consider restricting the CAP NET ADMIN capability to minimize the risk of exploitation.