| OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)CVE-2022-21618 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366)CVE-2022-39399 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411)CVE-2023-21835 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: weakness in AES implementation (8308682)CVE-2023-22041 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: modulo operator array indexing issue (8304460)CVE-2023-22044 |
Red Hat build of OpenJDK 17/LinuxRed Hat build of OpenJDK 17/Windows |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: ZIP file parsing infinite loop (8302483)CVE-2023-22036 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: HTTP client insufficient file name validation (8302475)CVE-2023-22006 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123)CVE-2024-20932 |
Red Hat build of OpenJDK 17/LinuxRed Hat build of OpenJDK 17/Windows |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708)CVE-2024-21012 |
Red Hat build of OpenJDK 11/LinuxRed Hat build of OpenJDK 11/Windows |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)CVE-2022-21628 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)CVE-2022-21624 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)CVE-2022-21626 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)CVE-2022-21619 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: soundbank URL remote loading (Sound, 8293742)CVE-2023-21843 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marksCVE-2023-25193 |
Red Hat Enterprise Linux 7/harfbuzzRed Hat build of OpenJDK 11/Linux |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)CVE-2023-21968 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: missing string checks for NULL characters (8296622)CVE-2023-21937 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304)CVE-2023-21938 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
کم
|
اصلاح اعلام نشده |
|
| OpenJDK: Swing HTML parsing issue (8296832)CVE-2023-21939 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| OpenJDK: certificate validation issue in TLS session negotiation (8298310)CVE-2023-21967 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|