| Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169 · GHSA-9339-86WC-4QGF |
xalan:xalanMigration Toolkit for Applications 6/xalan |
MavenRed Hat |
High
|
Fix reported |
|
| OpenJDK: incorrect handling of certain EC points (Security, 8178135)CVE-2017-10176 |
Red Hat Enterprise Linux 6/java-1.7.0-openjdkRed Hat Enterprise Linux 6/java-1.8.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: ECDSA implementation timing attack (JCE, 8175110)CVE-2017-10118 |
Red Hat Enterprise Linux 6/java-1.7.0-openjdkRed Hat Enterprise Linux 6/java-1.8.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)CVE-2022-21341 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)CVE-2022-21340 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)CVE-2022-21305 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)CVE-2022-21248 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)CVE-2022-21365 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)CVE-2022-21360 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)CVE-2022-21299 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)CVE-2022-21296 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)CVE-2022-21282 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)CVE-2022-21294 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)CVE-2022-21293 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)CVE-2022-21283 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: URI parsing inconsistencies (JNDI, 8278972)CVE-2022-21496 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)CVE-2022-21476 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)CVE-2022-21434 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)CVE-2022-21443 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)CVE-2022-21426 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
