Debian DSA-5128-1 : openjdk-17 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5128 advisory. Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in information disclosure, incorrect validation of ECDSA signatures or...

Debian DSA-5131-1 : openjdk-11 - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5131 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are...

SUSE SLED15: java-11-openjdk / java-11-openjdk-accessibility / etc (SUSE-SU-2022:1513-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1513-1 advisory. - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network...

SUSE-SU-2022:1513-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols bsc1198672. - CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network acces...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2022-002)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0332.b08-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2022-002 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2022:1474-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1474-1 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported...

SUSE-SU-2022:1474-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols bsc1198672. - CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network acces...

IBM Java 6.0 < 6.0.16.70 / 6.1 < 6.1.8.70 / 7.0 < 7.0.10.30 / 7.1 < 7.1.4.30 / 8.0 < 8.0.5.20 Multiple Vulnerabilities (Jul 17, 2018)

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.70 / 6.1 6.1.8.70 / 7.0 7.0.10.30 / 7.1 7.1.4.30 / 8.0 8.0.5.20. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle July 17 2018 CPU advisory. - Vulnerability in the Java SE, Java SE Embedd...

IBM Java 7.0 < 7.0.10.70 / 7.1 < 7.1.4.70 / 8.0 < 8.0.6.15 Multiple Vulnerabilities (Jan 14, 2020)

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.70 / 7.1 7.1.4.70 / 8.0 8.0.6.15. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle January 14 2020 CPU advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE...

IBM Java 6.0 < 6.0.16.45 / 6.1 < 6.1.8.45 / 7.0 < 7.0.10.5 / 7.1 < 7.1.4.5 / 8.0 < 8.0.4.5 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.45 / 6.1 6.1.8.45 / 7.0 7.0.10.5 / 7.1 7.1.4.5 / 8.0 8.0.4.5. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle April 18 2017 CPU advisory. - Vulnerability in the Java SE, Java SE Embedded...

IBM Java 7.0 < 7.0.10.45 / 7.1 < 7.1.4.45 / 8.0 < 8.0.5.35 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.45 / 7.1 7.1.4.45 / 8.0 8.0.5.35. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle April 16 2019 CPU advisory. - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE...

IBM Java 6.0 < 6.0.16.75 / 6.1 < 6.1.8.75 / 7.0 < 7.0.10.35 / 7.1 < 7.1.4.35 / 8.0 < 8.0.5.25 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.75 / 6.1 6.1.8.75 / 7.0 7.0.10.35 / 7.1 7.1.4.35 / 8.0 8.0.5.25. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle October 16 2018 CPU advisory. - Vulnerability in the Java SE, Java SE...

IBM Java 6.0 < 6.0.16.60 / 6.1 < 6.1.8.60 / 7.0 < 7.0.10.20 / 7.1 < 7.1.4.20 / 8.0 < 8.0.5.10 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.60 / 6.1 6.1.8.60 / 7.0 7.0.10.20 / 7.1 7.1.4.20 / 8.0 8.0.5.10. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle January 16 2018 CPU advisory. - Vulnerability in the Java SE, Java SE...

IBM Java 7.0 < 7.0.10.55 / 7.1 < 7.1.4.55 / 8.0 < 8.0.6.10 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.55 / 7.1 7.1.4.55 / 8.0 8.0.6.10. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle October 15 2019 CPU advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE...

IBM Java 6.0 < 6.0.16.35 / 6.1 < 6.1.8.35 / 7.0 < 7.0.9.60 / 7.1 < 7.1.3.60 / 8.0 < 8.0.3.20 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.35 / 6.1 6.1.8.35 / 7.0 7.0.9.60 / 7.1 7.1.3.60 / 8.0 8.0.3.20. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle October 18 2016 CPU advisory. - Unspecified vulnerability in Oracle Java S...

IBM Java 7.0 < 7.0.10.85 / 7.1 < 7.1.4.85 / 8.0 < 8.0.6.30 / 11.0 < 11.0.11.0 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.85 / 7.1 7.1.4.85 / 8.0 8.0.6.30 / 11.0 11.0.11.0. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle April 20 2021 CPU advisory. - Vulnerability in the Java SE, Java SE Embedded, Oracle...

IBM Java 6.0 < 6.0.16.41 / 6.1 < 6.1.8.41 / 7.0 < 7.0.10.1 / 7.1 < 7.1.4.1 / 8.0 < 8.0.4.1 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is prior to 6.0 6.0.16.41 / 6.1 6.1.8.41 / 7.0 7.0.10.1 / 7.1 7.1.4.1 / 8.0 8.0.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle January 17 2017 CPU advisory. - The DES and Triple DES ciphers, as used in t...

OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Difficult to exploit...

OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...

OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...