rhsa-2024 cve-2022-34169 xalan openjdk integer truncation issue in xalan-j jaxp 8285407 unix red hat build apache camel quarkus 3.8.4.sp2 security stability products developer experience.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.3 High

AI Score

Confidence

Low

JSON

An update for Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.4.SP2).
The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products:

CVE-2022-34169 xalan: OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

ibm 10

cvelist 1

nvd 1

osv 14

veracode 1

cbl_mariner 1

atlassian 1

github 1

debiancve 1

nessus 67

githubexploit 1

alpinelinux 1

prion 1

googleprojectzero 1

debian 4

openvas 33

ubuntucve 1

f5 1

redhatcve 1

cnvd 1

cve 1

gentoo 1

redos 1

redhat 19

altlinux 1

almalinux 5

suse 4

amazon 4

rocky 3

oraclelinux 8

centos 2

cloudlinux 1

fedora 4

photon 1

kaspersky 1

ibm

Security Bulletin: IBM Sterling B2B Integrator vulnerable to remote code execution due to Apache Xalan Java XSLT (CVE-2022-34169)

2024-04-11 13:14:32

Security Bulletin: IBM API Connect is impacted by a vulnerability in Apache Xalan Java XSLT library (CVE-2022-34169)

2022-12-01 00:42:16

Security Bulletin: Vulnerability found in Apache Xalan Java XSLT library may affect IBM Enterprise Records

2022-10-20 11:30:21

cvelist

CVE-2022-34169 Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

2022-07-19 00:00:00

nvd

CVE-2022-34169

2022-07-19 18:15:11

osv

CVE-2022-34169

2022-07-19 18:15:11

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

2022-07-20 00:00:18

bcel - security update

2022-10-18 00:00:00

veracode

Remote Code Execution

2022-07-20 08:21:43

cbl_mariner

CVE-2022-34169 affecting package openjdk8 1.8.0.332-2

2024-07-09 16:19:04

atlassian

RCE (Remote Code Execution) xalan:xalan Dependency in Jira Software Data Center and Server

2024-03-07 14:45:37

github

Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets

2022-07-20 00:00:18

debiancve

CVE-2022-34169

2022-07-19 18:15:11

nessus

Debian DSA-5256-1 : bcel - security update

2022-10-19 00:00:00

Debian DLA-3155-1 : bcel - LTS security update

2022-10-19 00:00:00

GLSA-202405-16 : Apache Commons BCEL: Remote Code Execution

2024-05-06 00:00:00

githubexploit

Exploit for Incorrect Conversion between Numeric Types in Apache Xalan-Java

2022-08-15 09:43:08

alpinelinux

CVE-2022-34169

2022-07-19 18:15:11

prion

Integer overflow

2022-07-19 18:15:00

googleprojectzero

Gregor Samsa: Exploiting Java's XML Signature Verification

2022-11-02 00:00:00

debian

[SECURITY] [DLA 3155-1] bcel security update

2022-10-18 17:55:52

[SECURITY] [DSA 5256-1] bcel security update

2022-10-18 18:04:55

[SECURITY] [DSA 5188-1] openjdk-11 security update

2022-07-22 20:58:41

openvas

Debian: Security Advisory (DLA-3155-1)

2022-10-19 00:00:00

Debian: Security Advisory (DSA-5256-1)

2022-10-20 00:00:00

SUSE: Security Advisory (SUSE-SU-2022:2856-1)

2022-08-22 00:00:00

ubuntucve

CVE-2022-34169

2022-07-19 00:00:00

K42795243 : Apache Xalan Java Library vulnerability CVE-2022-34169

2022-08-25 00:00:00

redhatcve

CVE-2022-34169

2022-07-19 22:54:51

cnvd

Apache Xalan input validation error vulnerability

2022-07-21 00:00:00

cve

CVE-2022-34169

2022-07-19 18:15:11

gentoo

Apache Commons BCEL: Remote Code Execution

2024-05-05 00:00:00

redos

ROS-20240522-05

2024-05-22 00:00:00

redhat

(RHSA-2022:5687) Important: java-11-openjdk security, bug fix, and enhancement update

2022-07-21 13:49:31

(RHSA-2022:5754) Important: OpenJDK 8u342 security update for Portable Linux Builds

2022-07-28 15:28:18

(RHSA-2022:5756) Important: OpenJDK 11.0.16 security update for Windows Builds

2022-07-28 15:36:18

altlinux

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.16.0.8-alt1_1jpp11

2022-08-05 00:00:00

almalinux

Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

Important: java-11-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

Important: java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

suse

Security update for java-1_8_0-openjdk (important)

2022-08-19 00:00:00

Security update for java-11-openjdk (important)

2022-08-09 00:00:00

Security update for java-1_8_0-ibm (important)

2022-08-31 00:00:00

amazon

Important: java-1.8.0-openjdk

2022-09-01 21:09:00

Important: java-11-amazon-corretto

2022-07-19 01:18:00

Important: java-11-amazon-corretto

2022-07-19 00:38:00

rocky

java-11-openjdk security, bug fix, and enhancement update

2022-07-21 13:41:28

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 13:45:21

java-17-openjdk security, bug fix, and enhancement update

2022-07-26 17:15:53

oraclelinux

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-26 00:00:00

java-11-openjdk security, bug fix, and enhancement update

2022-07-26 00:00:00

java-1.8.0-openjdk security, bug fix, and enhancement update

2022-07-25 00:00:00

centos

java security update

2022-08-02 19:14:32

java security update

2022-08-02 19:13:38

cloudlinux

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

2022-08-04 18:46:36

fedora

[SECURITY] Fedora 36 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc36

2022-08-03 01:27:35

[SECURITY] Fedora 35 Update: java-latest-openjdk-18.0.2.0.9-1.rolling.fc35

2022-08-03 01:49:31

[SECURITY] Fedora 36 Update: java-17-openjdk-17.0.4.0.8-1.fc36

2022-07-28 01:28:22

photon

Important Photon OS Security Update - PHSA-2022-3.0-0449

2022-09-09 00:00:00

kaspersky

KLA12588 Multiple vulnerabilities in Oracle Java SE and GraalVM

2022-07-19 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.3 High

AI Score

Confidence

Low

JSON

Related for RHSA-2024:3780