Advisory ROSA-SA-2023-2139

Software: java-11-openjdk 11.0.18.0.10-1
OS: rosa-server79

package_evr_string: 11.0.18.0.10-1

CVE-ID: CVE-2022-21282
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC: An easily exploitable vulnerability allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks exploiting this vulnerability could result in unauthorized reading of available data from a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability could also be exploited using an API in the specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command

CVE-ID: CVE-2022-21299
BDU-ID: None
CVE-Crit: N/A
CVE-DESC: This easily exploitable vulnerability allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks could result in an unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability can also be exploited by using an API in the specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command

CVE-ID: CVE-2022-21291
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC: This easily exploitable vulnerability allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks exploiting this vulnerability could result in unauthorized updates, insertions, or deletions of available data from a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability could also be exploited using an API in a specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command

CVE-ID: CVE-2022-21283
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC: This easily exploitable vulnerability allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks could result in an unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability can also be exploited by using an API in a specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command

CVE-ID: CVE-2022-21443
BDU-ID: None
CVE-Crit: LOW
CVE-DESC: This vulnerability is difficult to exploit and allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks could result in an unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability can also be exploited by using an API in a specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command

CVE-ID: CVE-2022-21426
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC: This easily exploitable vulnerability allows an unauthorized attacker with network access through multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks could result in an unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. This vulnerability can also be exploited by using an API in a specified component, such as through a web service that supplies data for the API.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update java-11-openjdk command