Lucene search

K
almalinuxAlmaLinuxALSA-2024:1818
HistoryApr 18, 2024 - 12:00 a.m.

Moderate: java-1.8.0-openjdk security update

2024-04-1800:00:00
errata.almalinux.org
15
openjdk
security fix
cve-2024-21011
cve-2024-21068
cve-2024-21085
cve-2024-21094
cvss score

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

  • OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
  • OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
  • OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
  • OpenJDK: C2 compilation fails with “Exceeded _node_regs array” (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%