| OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)CVE-2021-2163 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)CVE-2021-2388 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)CVE-2021-2369 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)CVE-2021-2341 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)CVE-2021-35588 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)CVE-2021-35567 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)CVE-2021-35578 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)CVE-2021-35550 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)CVE-2021-35603 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)CVE-2021-35586 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)CVE-2021-35564 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)CVE-2021-35561 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)CVE-2021-35559 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)CVE-2021-35556 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)CVE-2021-35565 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: URI parsing inconsistencies (JNDI, 8278972)CVE-2022-21496 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)CVE-2022-21476 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)CVE-2022-21434 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)CVE-2022-21443 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)CVE-2022-21426 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
