CVE-2019-2977 vulnerabilities

Vulnerabilities for packages: openjdk...

Oracle Linux 10 / 8 / 9 : java-21-openjdk (ELSA-2025-10873)

The remote Oracle Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10873 advisory. 1:21.0.8.0.9-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.8.0.9-1.1 - Update to jdk-21.0.8+9 GA - Update release notes to 21.0.8...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : OpenJDK 11 vulnerabilities (USN-7674-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7674-1 advisory. It was discovered that the 2D component of OpenJDK 11 did not properly manage memory under certain...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : OpenJDK 8 vulnerabilities (USN-7667-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7667-1 advisory. It was discovered that the 2D component of OpenJDK 8 did not properly manage memory under certain...

USN-7674-1: OpenJDK 11 vulnerabilities

It was discovered that the 2D component of OpenJDK 11 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 VMashroor Hasan Bhuiyan discovered that the JSSE...

Ubuntu 25.04 : OpenJDK 24 vulnerabilities (USN-7669-1)

The remote Ubuntu 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7669-1 advisory. It was discovered that the 2D component of OpenJDK 24 did not properly manage memory under certain circumstances. An attacker could possibly use this issue t...

Ubuntu: Security Advisory (USN-7668-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : OpenJDK 21 vulnerabilities (USN-7668-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7668-1 advisory. It was discovered that the 2D component of OpenJDK 21 did not properly manage memory under certain circumstances. An...

USN-7669-1: OpenJDK 24 vulnerabilities

It was discovered that the 2D component of OpenJDK 24 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 Mashroor Hasan Bhuiyan discovered that the JSSE...

USN-7668-1: OpenJDK 21 vulnerabilities

It was discovered that the 2D component of OpenJDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 Mashroor Hasan Bhuiyan discovered that the JSSE...

[SECURITY] [DLA 4248-1] openjdk-11 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4248-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 23, 2025 https://wiki.debian.org/LTS -...

DLA-4248-1 openjdk-11 - security update

Bulletin has no description...

OpenJDK 8 <= 8u452 / 11.0.0 <= 11.0.27 / 17.0.0 <= 17.0.15 / 21.0.0 <= 21.0.7 / 24.0.0 <= 24.0.1 Multiple Vulnerabilities (2025-07-15)

The version of OpenJDK installed on the remote host is 8 prior to 8u452 / 11.0.0 prior to 11.0.27 / 17.0.0 prior to 17.0.15 / 21.0.0 prior to 21.0.7 / 24.0.0 prior to 24.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025-07-15 advisory. Please Note: Java CVEs do...

Oracle OpenJDK 8.x - 24.x Multiple Vulnerabilities (Jul 2025)

Oracle OpenJDK is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:openjdk"; ifdescripti...

RHEL 10 : java-21-openjdk (RHSA-2025:7508)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7508 advisory. The OpenJDK 21 runtime environment. Security Fixes: openjdk: Enhance Buffered Image handling Oracle CPU 2025-04 CVE-2025-30698 openjdk:...

Debian dla-4174 : openjdk-11-dbg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4174 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4174-1 [email protected]...

Alibaba Cloud Linux 3 : 0118: java-11-openjdk (ALINUX3-SA-2023:0118)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0118 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-22006: Vulnerability in the Oracl...

java-11-openjdk security update

An update is available for java-11-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-11-openjdk packages provide the OpenJDK 11 Java Runtime...

java-17-openjdk security update

An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...

RockyLinux 8 : java-17-openjdk (RLSA-2024:4568)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4568 advisory. OpenJDK: RangeCheckElimination array index overflow 8323231 CVE-2024-21147 OpenJDK: potential UTF8 size overflow 8314794 CVE-2024-21131 OpenJDK: Excessiv...