Gentoo FoundationMGASA-2024-0179Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.8%
Long Exception message leading to crash. (CVE-2024-21011) HTTP/2 client improper reverse DNS lookup. (CVE-2024-21012) Integer overflow in C1 compiler address generation. (CVE-2024-21068) Pack200 excessive memory allocation. (CVE-2024-21085) C2 compilation fails with “Exceeded _node_regs array”. (CVE-2024-21094)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | java | < 1.8.0-openjdk-1.8.0.412.b08-1 | java-1.8.0-openjdk-1.8.0.412.b08-1.mga9 |
| Mageia | 9 | noarch | java | < 11-openjdk-11.0.23.0.9-1 | java-11-openjdk-11.0.23.0.9-1.mga9 |
| Mageia | 9 | noarch | java | < 17-openjdk-17.0.11.0.9-1 | java-17-openjdk-17.0.11.0.9-1.mga9 |
| Mageia | 9 | noarch | java-latest-openjdk | < 22.0.1.0.8-1.rolling.1 | java-latest-openjdk-22.0.1.0.8-1.rolling.1.mga9 |
Related
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
7.5 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.8%