359 matches found
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Kerberos. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos...
OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Concurrency. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. Missing restrictions on use of custom SocketImpl allows a remote attacker to crash the application...
OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)
Vulnerability in the Java SE product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Kerberos. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos...
OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Utilities. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
OpenJDK: Missing URL format validation (Networking, 8221518)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...
OpenJDK: Non-constant time comparison in ChaCha20Cipher (Security, 8221344)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 11.0.3 and 12.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. A remote attacker is able to crash the application via excessive resource consumption and a daemon restart using malicious values in an HTTP request...
Sandbox Restrictions Bypass
openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
Authorization Bypass
openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect integrity via vectors related to JAX-WS...
Sandbox Restrictions Bypass
openjdk is vulnerable to sandbox restrictions bypass. An unspecified vulnerability allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions and affect availability via vectors related to JAXP...
Authorization Bypass
openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc...
Denial Of Service (DoS)
openjdk is vulnerable to denial of service. An unspecified vulnerability allows remote attackers to affect availability via unknown vectors related to JGSS...
Authorization Bypass
openjdk is vulnerable to authorization bypass. An unspecified vulnerability allows remote attackers to affect confidentiality and integrity via vectors related to Swing...