CVE-2020-14579: 
NixOS vulnerability analysis and mitigation

CVE-2020-14579 is a security vulnerability affecting Java SE and Java SE Embedded libraries. The vulnerability was discovered and disclosed in July 2020, affecting Java SE versions 7u261, 8u251, and Java SE Embedded version 8u251. This vulnerability is related to an unexpected exception being raised by the DerValue.equals() method (Oracle CPU).

The vulnerability is characterized by an unexpected exception being raised in the DerValue.equals() method within Java's security libraries. It has been assigned a CVSS v3.1 base score of 3.7 (LOW), with the vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L (NIST NVD).

If exploited, this vulnerability could result in a partial denial of service (DoS) condition. The vulnerability is considered difficult to exploit and requires network access via multiple protocols to compromise Java SE and Java SE Embedded (Red Hat).

The vulnerability is considered difficult to exploit, requiring network access. No known exploits specifically targeting this vulnerability have been reported in the wild (Oracle CPU).

The vulnerability has been fixed in Java SE versions 8u262, 11.0.8, and Java SE Embedded 8u262. Users are strongly recommended to update to these or later versions. For systems that cannot be immediately updated, no alternative workarounds have been publicly documented (Red Hat).