Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:1822
HistoryApr 22, 2024 - 12:00 a.m.

Moderate: java-11-openjdk security update

2024-04-2200:00:00
errata.almalinux.org
7
java
openjdk
security update
exception message
integer overflow
memory allocation
compilation failure
dns lookup

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

  • OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
  • OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
  • OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
  • OpenJDK: C2 compilation fails with “Exceeded _node_regs array” (8317507) (CVE-2024-21094)
  • OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64java-11-openjdk-javadoc< 11.0.23.0.9-3.el9java-11-openjdk-javadoc-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-headless< 11.0.23.0.9-3.el9java-11-openjdk-headless-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-src< 11.0.23.0.9-3.el9java-11-openjdk-src-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-devel< 11.0.23.0.9-3.el9java-11-openjdk-devel-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-demo< 11.0.23.0.9-3.el9java-11-openjdk-demo-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-jmods< 11.0.23.0.9-3.el9java-11-openjdk-jmods-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-static-libs< 11.0.23.0.9-3.el9java-11-openjdk-static-libs-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk< 11.0.23.0.9-3.el9java-11-openjdk-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9x86_64java-11-openjdk-javadoc-zip< 11.0.23.0.9-3.el9java-11-openjdk-javadoc-zip-11.0.23.0.9-3.el9.x86_64.rpm
almalinux9ppc64lejava-11-openjdk< 11.0.23.0.9-3.el9java-11-openjdk-11.0.23.0.9-3.el9.ppc64le.rpm
Rows per page:
1-10 of 851

Related

nessus 51
redhat 21
openvas 25
ubuntu 4
osv 14
amazon 3
rocky 3
f5 1
debian 3
oraclelinux 6
mageia 1
almalinux 3
ibm 16
kaspersky 1
nvd 5
redhatcve 5
cve 5
cgr 5
vulnrichment 1
ubuntucve 5
debiancve 5
wolfi 5
cvelist 5
alpinelinux 5
aix 1
nessus
nessus
SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2024:1452-1)
2024-04-29 00:00:00
Oracle Linux 7 : java-11-openjdk (ELSA-2024-1821)
2024-04-23 00:00:00
Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2024-008)
2024-05-20 00:00:00
redhat
redhat
(RHSA-2024:1820) Moderate: OpenJDK 11.0.23 Security Update for Windows Builds
2024-04-17 11:44:17
(RHSA-2024:1821) Moderate: java-11-openjdk security update
2024-04-22 13:55:06
(RHSA-2024:1822) Moderate: java-11-openjdk security update
2024-04-22 13:25:48
openvas
openvas
Debian: Security Advisory (DLA-3793-1)
2024-04-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1498-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1452-1)
2024-05-07 00:00:00
ubuntu
ubuntu
OpenJDK 11 vulnerabilities
2024-06-06 00:00:00
OpenJDK 17 vulnerabilities
2024-06-06 00:00:00
OpenJDK 21 vulnerabilities
2024-06-06 00:00:00
osv
osv
openjdk-11 - security update
2024-04-22 00:00:00
openjdk-11 - security update
2024-04-22 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
amazon
amazon
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-17-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
rocky
rocky
java-11-openjdk security update
2024-05-06 13:04:21
java-1.8.0-openjdk security update
2024-05-06 13:04:21
java-21-openjdk security update
2024-05-06 13:04:21
f5
f5
K000139377 : OpenJDK vulnerabilities CVE-2024-21011, CVE-2024-21012, CVE-2024-21068, CVE-2024-21085, and CVE-2024-21094
2024-04-23 00:00:00
debian
debian
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
[SECURITY] [DSA 5672-1] openjdk-17 security update
2024-04-22 14:23:20
oraclelinux
oraclelinux
java-11-openjdk security update
2024-04-22 00:00:00
java-11-openjdk security update
2024-04-23 00:00:00
java-17-openjdk security update
2024-04-22 00:00:00
mageia
mageia
Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities
2024-05-16 20:29:32
almalinux
almalinux
Moderate: java-17-openjdk security update
2024-04-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-21-openjdk security update
2024-04-18 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition
2024-05-09 19:33:03
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264)
2024-05-21 19:42:39
Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.
2024-05-28 19:41:04
kaspersky
kaspersky
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-04-16 00:00:00
nvd
nvd
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21085
2024-04-16 22:15:28
CVE-2024-21011
2024-04-16 22:15:15
redhatcve
redhatcve
CVE-2024-21012
2024-04-17 18:53:47
CVE-2024-21068
2024-04-17 18:53:56
CVE-2024-21085
2024-04-17 18:53:55
cve
cve
CVE-2024-21085
2024-04-16 22:15:28
CVE-2024-21068
2024-04-16 22:15:25
CVE-2024-21012
2024-04-16 22:15:15
cgr
cgr
CVE-2024-21085 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21094 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21068 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-21085
2024-04-16 21:26:27
ubuntucve
ubuntucve
CVE-2024-21011
2024-04-16 00:00:00
CVE-2024-21094
2024-04-16 00:00:00
CVE-2024-21012
2024-04-16 00:00:00
debiancve
debiancve
CVE-2024-21068
2024-04-16 22:15:25
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21085
2024-04-16 22:15:28
wolfi
wolfi
CVE-2024-21012 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21068 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21085 vulnerabilities
2024-06-29 09:08:33
cvelist
cvelist
CVE-2024-21011
2024-04-16 21:26:01
CVE-2024-21068
2024-04-16 21:26:21
CVE-2024-21012
2024-04-16 21:26:02
alpinelinux
alpinelinux
CVE-2024-21011
2024-04-16 22:15:15
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21085
2024-04-16 22:15:28
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 15:10:30

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON
Related for ALSA-2024:1822
nessus51redhat21openvas25ubuntu4osv14amazon3rocky3f51debian3oraclelinux6mageia1almalinux3ibm16kaspersky1nvd5redhatcve5cve5cgr5vulnrichment1ubuntucve5debiancve5wolfi5cvelist5alpinelinux5aix1