Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)

🗓️ 19 Oct 2022 22:22:47Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 6 Views

Improper handling of long NTLM hostnames allows unauthenticated network attackers to access and modify data in Java SE and GraalVM.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ibm		Security Bulletin: IBM SDK, Java Technology Edition, Security Update February 2023
10 Mar 202315:30
–ibm
ibm		Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition
20 Apr 202313:36
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms Oct 2022 CPU (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)
7 Feb 202314:27
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.
15 Dec 202209:10
–ibm
ibm		Security Bulletin: IBM Sterling Partner Engagement Manager vulnerable to multiple issues due to IBM Java SE
6 Jun 202306:33
–ibm
ibm		Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to multiple vulnerabilities due to IBM Java
15 Feb 202306:57
–ibm
ibm		Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affects Liberty for Java for IBM Cloud due to the October 2022 CPU plus CVE-2022-3676
10 Jan 202318:48
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester
16 Jun 202319:00
–ibm
ibm		Security Bulletin: Vulnerabilities in IBM Java Runtime affecting Tivoli Netcool/OMNIbus (Multiple CVEs)
24 Oct 202315:16
–ibm
ibm		Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime
10 Nov 202212:27
–ibm
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux8.4aarch64java-1.8.0-openjdk1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-1:1.8.0.352.b08-2.el8_4.aarch64.rpm
Red Hat Enterprise Linux8.4ppc64lejava-1.8.0-openjdk1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-1:1.8.0.352.b08-2.el8_4.ppc64le.rpm
Red Hat Enterprise Linux8.4s390xjava-1.8.0-openjdk1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-1:1.8.0.352.b08-2.el8_4.s390x.rpm
Red Hat Enterprise Linux8.4x86_64java-1.8.0-openjdk1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-1:1.8.0.352.b08-2.el8_4.x86_64.rpm
Red Hat Enterprise Linux8.4aarch64java-1.8.0-openjdk-accessibility1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el8_4.aarch64.rpm
Red Hat Enterprise Linux8.4ppc64lejava-1.8.0-openjdk-accessibility1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el8_4.ppc64le.rpm
Red Hat Enterprise Linux8.4s390xjava-1.8.0-openjdk-accessibility1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el8_4.s390x.rpm
Red Hat Enterprise Linux8.4x86_64java-1.8.0-openjdk-accessibility1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el8_4.x86_64.rpm
Red Hat Enterprise Linux8.4x86_64java-1.8.0-openjdk-accessibility-fastdebug1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.352.b08-2.el8_4.x86_64.rpm
Red Hat Enterprise Linux8.4aarch64java-1.8.0-openjdk-accessibility-slowdebug1:1.8.0.352.b08-2.el8_4java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.352.b08-2.el8_4.aarch64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Jun 2026 12:37Current
7.2High risk
Vulners AI Score7.2
CVSS 3.13.7
EPSS0.02376
SSVC
CWE-192
ntlm hostnameunauthenticated accessdata modificationjava segraalvm enterprise editionopenjdk
6