The vulnerability of the OpenJDK project for the Java programming language stems from inadequate access control mechanisms, allowing attackers to trigger a service failure.

The vulnerability of the OpenJDK project for the Java programming language is related to insufficient testing of serial streams before exception deserialization. Exploiting this vulnerability could allow a malicious actor to cause service failures...

USN-4080-1: OpenJDK 8 vulnerabilities

Keegan Ryan discovered that the ECC implementation in OpenJDK was not sufficiently resilient to side-channel attacks. An attacker could possibly use this to expose sensitive information. CVE-2019-2745 It was discovered that OpenJDK did not sufficiently validate serial streams before deserializing...