Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2024:1825
HistoryApr 18, 2024 - 12:00 a.m.

Moderate: java-17-openjdk security update

2024-04-1800:00:00
errata.almalinux.org
9
java 17 openjdk
security update
cve-2024-21011
cve-2024-21068
cve-2024-21094
http/2 client
long exception message
integer overflow

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

  • OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
  • OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
  • OpenJDK: C2 compilation fails with “Exceeded _node_regs array” (8317507) (CVE-2024-21094)
  • OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9x86_64java-17-openjdk-demo< 17.0.11.0.9-2.el9java-17-openjdk-demo-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-devel< 17.0.11.0.9-2.el9java-17-openjdk-devel-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-src< 17.0.11.0.9-2.el9java-17-openjdk-src-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-javadoc< 17.0.11.0.9-2.el9java-17-openjdk-javadoc-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-static-libs< 17.0.11.0.9-2.el9java-17-openjdk-static-libs-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-javadoc-zip< 17.0.11.0.9-2.el9java-17-openjdk-javadoc-zip-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk< 17.0.11.0.9-2.el9java-17-openjdk-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-headless< 17.0.11.0.9-2.el9java-17-openjdk-headless-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9x86_64java-17-openjdk-jmods< 17.0.11.0.9-2.el9java-17-openjdk-jmods-17.0.11.0.9-2.el9.x86_64.rpm
almalinux9aarch64java-17-openjdk< 17.0.11.0.9-2.el9java-17-openjdk-17.0.11.0.9-2.el9.aarch64.rpm
Rows per page:
1-10 of 851

Related

oraclelinux 6
nessus 51
openvas 22
amazon 3
osv 14
debian 3
redhat 21
ubuntu 4
rocky 3
f5 1
mageia 1
almalinux 3
ibm 15
kaspersky 1
nvd 4
redhatcve 4
alpinelinux 4
cvelist 4
cgr 4
ubuntucve 4
debiancve 4
cve 4
wolfi 4
oracle 1
oraclelinux
oraclelinux
java-17-openjdk security update
2024-04-22 00:00:00
java-21-openjdk security update
2024-04-23 00:00:00
java-11-openjdk security update
2024-04-22 00:00:00
nessus
nessus
Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2024-1825)
2024-04-19 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : java-17-openjdk (SUSE-SU-2024:1499-1)
2024-05-07 00:00:00
Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2024-598)
2024-04-29 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1499-1)
2024-05-07 00:00:00
Debian: Security Advisory (DSA-5672-1)
2024-04-23 00:00:00
Ubuntu: Security Advisory (USN-6812-1)
2024-06-07 00:00:00
amazon
amazon
Low: java-17-amazon-corretto
2024-04-24 22:15:00
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
osv
osv
Moderate: java-17-openjdk security update
2024-04-18 00:00:00
openjdk-21 vulnerabilities
2024-06-06 01:57:21
openjdk-17 - security update
2024-04-22 00:00:00
debian
debian
[SECURITY] [DSA 5672-1] openjdk-17 security update
2024-04-22 14:23:20
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
redhat
redhat
(RHSA-2024:1825) Moderate: java-17-openjdk security update
2024-04-18 00:58:08
(RHSA-2024:1824) Moderate: OpenJDK 17.0.11 Security Update for Windows Builds
2024-04-17 11:47:22
(RHSA-2024:1823) Moderate: OpenJDK 17.0.11 Security Update for Portable Linux Builds
2024-04-17 11:47:26
ubuntu
ubuntu
OpenJDK 17 vulnerabilities
2024-06-06 00:00:00
OpenJDK 21 vulnerabilities
2024-06-06 00:00:00
OpenJDK 11 vulnerabilities
2024-06-06 00:00:00
rocky
rocky
java-11-openjdk security update
2024-05-06 13:04:21
java-21-openjdk security update
2024-05-06 13:04:21
java-1.8.0-openjdk security update
2024-05-06 13:04:21
f5
f5
K000139377 : OpenJDK vulnerabilities CVE-2024-21011, CVE-2024-21012, CVE-2024-21068, CVE-2024-21085, and CVE-2024-21094
2024-04-23 00:00:00
mageia
mageia
Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities
2024-05-16 20:29:32
almalinux
almalinux
Moderate: java-21-openjdk security update
2024-04-18 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition
2024-05-09 19:33:03
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264)
2024-05-21 19:42:39
Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.
2024-05-28 19:41:04
kaspersky
kaspersky
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-04-16 00:00:00
nvd
nvd
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21011
2024-04-16 22:15:15
CVE-2024-21094
2024-04-16 22:15:29
redhatcve
redhatcve
CVE-2024-21012
2024-04-17 18:53:47
CVE-2024-21068
2024-04-17 18:53:56
CVE-2024-21011
2024-04-17 18:53:37
alpinelinux
alpinelinux
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21011
2024-04-16 22:15:15
CVE-2024-21094
2024-04-16 22:15:29
cvelist
cvelist
CVE-2024-21012
2024-04-16 21:26:02
CVE-2024-21011
2024-04-16 21:26:01
CVE-2024-21068
2024-04-16 21:26:21
cgr
cgr
CVE-2024-21094 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21068 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21012 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2024-21011
2024-04-16 00:00:00
CVE-2024-21012
2024-04-16 00:00:00
CVE-2024-21068
2024-04-16 00:00:00
debiancve
debiancve
CVE-2024-21068
2024-04-16 22:15:25
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21094
2024-04-16 22:15:29
cve
cve
CVE-2024-21068
2024-04-16 22:15:25
CVE-2024-21012
2024-04-16 22:15:15
CVE-2024-21011
2024-04-16 22:15:15
wolfi
wolfi
CVE-2024-21011 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21012 vulnerabilities
2024-06-29 09:08:33
CVE-2024-21094 vulnerabilities
2024-06-29 09:08:33
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON
Related for ALSA-2024:1825
oraclelinux6nessus51openvas22amazon3osv14debian3redhat21ubuntu4rocky3f51mageia1almalinux3ibm15kaspersky1nvd4redhatcve4alpinelinux4cvelist4cgr4ubuntucve4debiancve4cve4wolfi4oracle1