OpenJDK: random exponentials issue (Libraries, 8283875)

🗓️ 28 Jul 2022 15:45:58Reported by RedHatType

Vulnerability in Oracle Java SE 17.0.3.1 and GraalVM 21.3.2/22.1.0 allows unauthenticated attackers to modify data.

Reporter	Title	Published	Views	Family All 133
ibm	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	7 Sep 202210:52	–	ibm
ibm	Security Bulletin: IBM Security Verify Password Synchronization Plug-in for Windows AD is affected by multiple vulnerabilities	13 Jun 202508:19	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility	22 Sep 202214:50	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	11 Oct 202215:36	–	ibm
attackerkb	CVE-2022-21549	19 Jul 202222:15	–	attackerkb
nessus	Amazon Linux 2022 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2022-2022-113)	6 Sep 202200:00	–	nessus
nessus	Amazon Linux 2022 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2022-2022-121)	6 Sep 202200:00	–	nessus
nessus	Amazon Linux 2022 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2022-2022-151)	20 Oct 202200:00	–	nessus
nessus	Amazon Linux 2 : java-17-amazon-corretto (ALAS-2022-1824)	21 Jul 202200:00	–	nessus
nessus	Alibaba Cloud Linux 3 : 0145: java-17-openjdk (ALINUX3-SA-2022:0145)	14 May 202500:00	–	nessus

Vulners

Node

AND

redhat openjdkRange<17windows

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-21549
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-21549
cve	www.cve.org/CVERecord

27 May 2026 16:05Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3

EPSS0.02253

SSVC