| OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)CVE-2022-21618 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366)CVE-2022-39399 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411)CVE-2023-21835 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: weakness in AES implementation (8308682)CVE-2023-22041 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: ZIP file parsing infinite loop (8302483)CVE-2023-22036 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: HTTP client insufficient file name validation (8302475)CVE-2023-22006 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708)CVE-2024-21012 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)CVE-2021-2163 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)CVE-2021-2388 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)CVE-2021-2369 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)CVE-2021-2341 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)CVE-2021-35567 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)CVE-2021-35578 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)CVE-2021-35550 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)CVE-2021-35603 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)CVE-2021-35586 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)CVE-2021-35564 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)CVE-2021-35561 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)CVE-2021-35559 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)CVE-2021-35556 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
