Improper input validation in Oracle Java SE - CVE-2021-3522

Vulnerability identifier: #VU57488

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3522

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the JavaFX (GStreamer) component in Java SE. A local non-authenticated attacker can exploit this vulnerability to perform a denial of service (DoS) attack.

Oracle Java SE
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Storage
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
Ubuntu
openEuler
Brocade SANnav
EMC Integrated Data Protection Appliance
Dell Secure Connect Gateway
Dell EMC Data Protection Search
EMC Data Protection Advisor
SUSE Linux Enterprise Module for Packagehub Subpackages
gstreamer-0_10-plugins-base-debugsource
typelib-1_0-GstInterfaces-0_10
typelib-1_0-GstApp-0_10
gstreamer-0_10-plugins-base-devel
gstreamer-0_10-plugins-base-lang
libgstinterfaces-0_10-0-debuginfo-32bit
libgstinterfaces-0_10-0-debuginfo
libgstinterfaces-0_10-0-32bit
libgstinterfaces-0_10-0
libgstapp-0_10-0-debuginfo-32bit
libgstapp-0_10-0-debuginfo
libgstapp-0_10-0-32bit
libgstapp-0_10-0
gstreamer-0_10-plugins-base-debuginfo-32bit
gstreamer-0_10-plugins-base-debuginfo
gstreamer-0_10-plugins-base-32bit
gstreamer-0_10-plugins-base
gstreamer-plugins-base
gstreamer-plugins-base-debuginfo
gstreamer-plugins-base-devel
gstreamer-plugins-base-debugsource
gstreamer-plugins-base-help
libgstvideo-1_0-0-debuginfo
gstreamer-plugins-base-debuginfo-32bit
typelib-1_0-GstAudio-1_0
libgstfft-1_0-0-32bit
libgstfft-1_0-0-debuginfo-32bit
typelib-1_0-GstVideo-1_0
libgstapp-1_0-0-32bit
libgstapp-1_0-0-debuginfo-32bit
libgstaudio-1_0-0-32bit
libgstaudio-1_0-0-debuginfo-32bit
libgstpbutils-1_0-0-32bit
libgstpbutils-1_0-0-debuginfo-32bit
libgsttag-1_0-0-32bit
libgstaudio-1_0-0
libgsttag-1_0-0-debuginfo
libgsttag-1_0-0
libgstsdp-1_0-0-debuginfo
libgstsdp-1_0-0
libgstrtsp-1_0-0-debuginfo
libgstrtsp-1_0-0
libgstrtp-1_0-0-debuginfo
libgstrtp-1_0-0
libgstriff-1_0-0-debuginfo
libgstriff-1_0-0
libgstpbutils-1_0-0-debuginfo
libgstpbutils-1_0-0
libgstfft-1_0-0-debuginfo
libgstfft-1_0-0
libgstaudio-1_0-0-debuginfo
typelib-1_0-GstPbutils-1_0
libgstapp-1_0-0-debuginfo
libgstapp-1_0-0
libgstallocators-1_0-0-debuginfo
libgstallocators-1_0-0
typelib-1_0-GstSdp-1_0
typelib-1_0-GstRtsp-1_0
typelib-1_0-GstRtp-1_0
typelib-1_0-GstFft-1_0
typelib-1_0-GstApp-1_0
typelib-1_0-GstAllocators-1_0
libgstvideo-1_0-0
typelib-1_0-GstTag-1_0
libgstvideo-1_0-0-32bit
libgsttag-1_0-0-debuginfo-32bit
gstreamer-plugins-base-lang
libgstvideo-1_0-0-debuginfo-32bit
gstreamer1.0-plugins-base (Ubuntu package)
gstreamer1-plugins-base
gstreamer1-plugins-base-devel
gstreamer1-plugins-base-debugsource
gstreamer1-plugins-base-debuginfo
gstreamer1-plugins-base-help
gstreamer-plugins-base-doc
typelib-1_0-GstGL-1_0
libgstgl-1_0-0
libgstgl-1_0-0-debuginfo
gstreamer-plugins-base-32bit
libgstriff-1_0-0-32bit
libgstpbutils-1_0-0-32bit-debuginfo
libgstgl-1_0-0-32bit-debuginfo
libgstgl-1_0-0-32bit
libgstfft-1_0-0-32bit-debuginfo
libgstaudio-1_0-0-32bit-debuginfo
libgstapp-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit-debuginfo
libgstallocators-1_0-0-32bit
gstreamer-plugins-base-devel-32bit
gstreamer-plugins-base-32bit-debuginfo
libgstriff-1_0-0-32bit-debuginfo
libgstrtp-1_0-0-32bit
libgstrtp-1_0-0-32bit-debuginfo
libgstrtsp-1_0-0-32bit
libgstrtsp-1_0-0-32bit-debuginfo
libgstsdp-1_0-0-32bit
libgstsdp-1_0-0-32bit-debuginfo
libgsttag-1_0-0-32bit-debuginfo
libgstvideo-1_0-0-32bit-debuginfo
EMC ESRS Policy Manager
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere 360
Unisphere for PowerMax
Unisphere for PowerMax Virtual Appliance
VASA Provider Standalone

Install updates from vendor's website.

Brocade SANnav - update to 2.2.1
EMC Integrated Data Protection Appliance - update to 2.7.1
Dell Secure Connect Gateway - update to 5.14.00.10
Dell EMC Data Protection Search - update to 19.6.0
gstreamer-0_10-plugins-base-debugsource - update to 0.10.36-18.6.1
typelib-1_0-GstInterfaces-0_10 - update to 0.10.36-18.6.1
typelib-1_0-GstApp-0_10 - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base-devel - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base-lang - update to 0.10.36-18.6.1
libgstinterfaces-0_10-0-debuginfo-32bit - update to 0.10.36-18.6.1
libgstinterfaces-0_10-0-debuginfo - update to 0.10.36-18.6.1
libgstinterfaces-0_10-0-32bit - update to 0.10.36-18.6.1
libgstinterfaces-0_10-0 - update to 0.10.36-18.6.1
libgstapp-0_10-0-debuginfo-32bit - update to 0.10.36-18.6.1
libgstapp-0_10-0-debuginfo - update to 0.10.36-18.6.1
libgstapp-0_10-0-32bit - update to 0.10.36-18.6.1
libgstapp-0_10-0 - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base-debuginfo-32bit - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base-debuginfo - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base-32bit - update to 0.10.36-18.6.1
gstreamer-0_10-plugins-base - update to 0.10.36-18.6.1
gstreamer-plugins-base - update to 0.10.36-22
gstreamer-plugins-base-debuginfo - update to 0.10.36-22
gstreamer-plugins-base-devel - update to 0.10.36-22
gstreamer-plugins-base-debugsource - update to 0.10.36-22
gstreamer-plugins-base-help - update to 0.10.36-22
libgstvideo-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
gstreamer-plugins-base-debuginfo-32bit - update to 1.8.3-13.6.1
gstreamer-plugins-base-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstAudio-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
gstreamer-plugins-base-debugsource - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstfft-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgstfft-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
typelib-1_0-GstVideo-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstapp-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgstapp-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
libgstaudio-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgstaudio-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
libgstpbutils-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgstpbutils-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
libgsttag-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgstaudio-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgsttag-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgsttag-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstsdp-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstsdp-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstrtsp-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstrtsp-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstrtp-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstrtp-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstriff-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstriff-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstpbutils-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstpbutils-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstfft-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstfft-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstaudio-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstPbutils-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstapp-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstapp-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstallocators-1_0-0-debuginfo - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstallocators-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
gstreamer-plugins-base - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstSdp-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstRtsp-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstRtp-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstFft-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1
typelib-1_0-GstApp-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstAllocators-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
gstreamer-plugins-base-devel - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstvideo-1_0-0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
typelib-1_0-GstTag-1_0 - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstvideo-1_0-0-32bit - addressed in versions 1.8.3-13.6.1, 1.16.3-150200.4.6.2
libgsttag-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
gstreamer-plugins-base-lang - addressed in versions 1.8.3-13.6.1, 1.12.5-150000.3.6.1, 1.16.3-150200.4.6.2
libgstvideo-1_0-0-debuginfo-32bit - update to 1.8.3-13.6.1
gstreamer1.0-plugins-base (Ubuntu package) - addressed in versions 1.14.5-0ubuntu1~18.04.3, 1.16.2-4ubuntu0.1, 1.18.0-2ubuntu0.1
gstreamer1-plugins-base - update to 1.16.2-2
gstreamer1-plugins-base-devel - update to 1.16.2-2
gstreamer1-plugins-base-debugsource - update to 1.16.2-2
gstreamer1-plugins-base-debuginfo - update to 1.16.2-2
gstreamer1-plugins-base-help - update to 1.16.2-2
gstreamer-plugins-base-doc - update to 1.16.3-150200.4.6.2
typelib-1_0-GstGL-1_0 - update to 1.16.3-150200.4.6.2
libgstgl-1_0-0 - update to 1.16.3-150200.4.6.2
libgstgl-1_0-0-debuginfo - update to 1.16.3-150200.4.6.2
gstreamer-plugins-base-32bit - update to 1.16.3-150200.4.6.2
libgstriff-1_0-0-32bit - update to 1.16.3-150200.4.6.2
libgstpbutils-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstgl-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstgl-1_0-0-32bit - update to 1.16.3-150200.4.6.2
libgstfft-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstaudio-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstapp-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstallocators-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstallocators-1_0-0-32bit - update to 1.16.3-150200.4.6.2
gstreamer-plugins-base-devel-32bit - update to 1.16.3-150200.4.6.2
gstreamer-plugins-base-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstriff-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstrtp-1_0-0-32bit - update to 1.16.3-150200.4.6.2
libgstrtp-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstrtsp-1_0-0-32bit - update to 1.16.3-150200.4.6.2
libgstrtsp-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstsdp-1_0-0-32bit - update to 1.16.3-150200.4.6.2
libgstsdp-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgsttag-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
libgstvideo-1_0-0-32bit-debuginfo - update to 1.16.3-150200.4.6.2
EMC ESRS Policy Manager - update to 5.10.00.00
Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.18, 9.2.3.0
Solutions Enabler - addressed in versions 9.1.0.18, 9.2.3.0
Unisphere 360 - addressed in versions 9.1.0.29, 9.2.3.3
Unisphere for PowerMax - addressed in versions 9.1.0.31, 9.2.3.4
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.31, 9.2.3.4
VASA Provider Standalone - addressed in versions 9.1.0.723, 9.2.3.0
EMC Data Protection Advisor - addressed in versions 19.4 B108, 19.5 B83, 19.6 B33

• https://www.oracle.com/security-alerts/cpuoct2021.html

• Multiple vulnerabilities in Java SE
• Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
• Multiple vulnerabilities in Dell EMC Data Protection Search
• Ubuntu update for gst-plugins-base1.0
• Multiple vulnerabilities in Brocade SANnav
• Multiple vulnerabilities in Dell EMC Policy Manager
• Multiple vulnerabilities in Dell EMC Data Protection Advisor (DPA)
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-plugins-base
• SUSE update for gstreamer-0_10-plugins-base
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Unisphere for PowerMax, Dell Solutions Enabler, Dell Unisphere 360, Dell VASA
• SUSE update for gstreamer-plugins-base
• openEuler 20.03 LTS SP1 update for gstreamer-plugins-base
• openEuler update for gstreamer1-plugins-base