| OpenJDK: Incorrect handling of partially quoted arguments in ProcessBuilder on Windows (Libraries, 8250568)CVE-2021-2161 |
Red Hat build of OpenJDK 1.8/WindowsRed Hat build of OpenJDK 11/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)CVE-2021-2163 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)CVE-2021-2388 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)CVE-2021-2369 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)CVE-2021-2341 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)CVE-2021-35588 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)CVE-2021-35567 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)CVE-2021-35578 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)CVE-2021-35550 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)CVE-2021-35603 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)CVE-2021-35586 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)CVE-2021-35564 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)CVE-2021-35561 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)CVE-2021-35559 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)CVE-2021-35556 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)CVE-2021-35565 |
Red Hat build of OpenJDK 1.8/LinuxRed Hat build of OpenJDK 1.8/Windows |
Red Hat |
High
|
No fix reported |
|
| OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)CVE-2022-21628 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)CVE-2022-21624 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Low
|
No fix reported |
|
| OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)CVE-2022-21626 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)CVE-2022-21619 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Low
|
No fix reported |
|
