CVE-2022-21624
Low · 3.7CVSS
3.7
EPSS
2.0%
Published
Oct 18, 2022
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A hard-to-exploit weakness in Java software could allow attackers to change some data inside applications that run code downloaded from the internet.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- High
- Impact
- Data Tampering
- Component
- Library
- Class
- Authorization Bypass
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
A flaw in the JNDI component permits an unauthenticated network attacker to perform unauthorized update, insert, or delete operations on data accessible via Java APIs when untrusted code executes inside the sandbox.
Why it matters to the business
Organizations running Java applications that process code from external sources face a risk of data tampering, which may affect integrity of client-side or API-driven workloads even though exploitation is difficult.
How an attack unfolds
An attacker reaches a Java deployment (typically a sandboxed applet or Web Start application) over the network, supplies crafted data through JNDI APIs or a web service feeding those APIs, and leverages the authorization weakness to modify accessible data.
How to fix it
Apply the latest Oracle Critical Patch Update to Oracle Java SE and GraalVM Enterprise Edition; replace all affected versions (8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19, 20.3.7, 21.3.3, 22.2.0) with patched releases and rebuild any downstream packages that embed the vulnerable runtimes.
How to confirm the fix worked
Confirm the installed Java version reports a patch level newer than the affected releases, then execute regression tests that exercise JNDI calls from untrusted code paths to verify no unauthorized data modifications occur.
Typical attack path
- Locate a Java runtime executing sandboxed code that loads untrusted content
- Send network requests or API calls that invoke JNDI operations with attacker-controlled data
- Trigger the component flaw to bypass intended restrictions and alter data
How to detect it
Review application and JNDI logs for unexpected modification attempts, inspect network flows to Java services for unusual API usage patterns, and correlate with data-integrity alerts in affected applications.
What your security team should do
- Treat as a low-urgency but mandatory update for all Java runtimes exposed to untrusted code
- Inventory every Oracle JDK, JRE, and GraalVM instance plus NetApp and Azul derivatives and schedule upgrades
- Disable or tightly restrict sandboxed Java Web Start and applet usage where feasible
The record
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | java-1.8.0-openjdk | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-slowdebug | 0 | 1:1.8.0.352.b08-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-demo | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-demo-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-demo-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-devel | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-devel-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-devel-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-headless | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-headless-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-headless-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-javadoc | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-javadoc-zip | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-jmods | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-jmods-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-jmods-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-src | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-src-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-src-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-static-libs | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-static-libs-fastdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-11-openjdk-static-libs-slowdebug | 0 | 1:11.0.17.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-demo | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-devel | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-headless | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-jmods | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-src | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.5.0.8-2.el8_6 |
| AlmaLinux:9 | java-1.8.0-openjdk | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-headless-slowdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-slowdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-src-fastdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-1.8.0-openjdk-src-slowdebug | 0 | 1:1.8.0.352.b08-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-demo | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-demo-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-demo-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-devel | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-devel-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-devel-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-headless | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-headless-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-headless-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-javadoc | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-javadoc-zip | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-jmods | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-jmods-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-jmods-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-src | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-src-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-src-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-static-libs | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-static-libs-fastdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-11-openjdk-static-libs-slowdebug | 0 | 1:11.0.17.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-demo | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-devel | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-headless | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-jmods | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-src | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.5.0.8-2.el9_0 |
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Debian:10 | openjdk-11 | 0 | 11.0.18+10-1~deb10u1 |
| Debian:11 | openjdk-11 | 0 | 11.0.18+10-1~deb11u1 |
| Debian:11 | openjdk-17 | 0 | 17.0.6+10-1~deb11u1 |
| Debian:12 | openjdk-17 | 0 | 17.0.5+8-1 |
| Debian:13 | openjdk-17 | 0 | 17.0.5+8-1 |
| Mageia:8 | java-1.8.0-openjdk | 0 | 1.8.0.352.b08-1.1.mga8 |
| Mageia:8 | java-11-openjdk | 0 | 11.0.17.0.8-1.1.mga8 |
| Mageia:8 | timezone | 0 | 2022e-1.mga8 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-1.8.0-openjdk-src | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-debuginfo | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-demo | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-devel | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-headless | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-javadoc | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-javadoc-zip | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-jmods | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-src | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::client | java-11-openjdk-static-libs | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-debuginfo | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-1.8.0-openjdk-src | 0 | 1:1.8.0.352.b08-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-11-openjdk | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-11-openjdk-debuginfo | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-11-openjdk-demo | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-11-openjdk-devel | 0 | 1:11.0.17.0.8-2.el7_9 |
| Red Hat:enterprise_linux:7::computenode | java-11-openjdk-headless | 0 | 1:11.0.17.0.8-2.el7_9 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects java-1.8.0-openjdk
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect… Also affects java-1.8.0-openjdk
- CVE-2024-21147 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2024-21145 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2024-21140 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk