rpm package

almalinux/java-17-openjdk-demo

pkg:rpm/almalinux/java-17-openjdk-demo

Vulnerabilities (100)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2023-21835		—	< 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7	Jan 17, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable
CVE-2022-39399	Low	3.7	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to e
CVE-2022-21626	Med	5.3	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily expl
CVE-2022-21624	Low	3.7	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. D
CVE-2022-21619	Low	3.7	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.
CVE-2022-21618	Med	5.3	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows
CVE-2022-21628		—	< 1:17.0.5.0.8-2.el9_0	1:17.0.5.0.8-2.el9_0	Oct 18, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 2
CVE-2022-21549	Med	5.3	< 1:17.0.4.0.8-2.el9_0	1:17.0.4.0.8-2.el9_0	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allow
CVE-2022-21540	Med	5.3	< 1:17.0.4.0.8-2.el9_0	1:17.0.4.0.8-2.el9_0	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-34169	Hig	7.5	< 1:17.0.4.0.8-2.el9_0	1:17.0.4.0.8-2.el9_0	Jul 19, 2022	The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update t
CVE-2022-21541		—	< 1:17.0.4.0.8-2.el9_0	1:17.0.4.0.8-2.el9_0	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-21476	Hig	7.5	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21496		—	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21449		—	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerabilit
CVE-2022-21443		—	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Dif
CVE-2022-21434		—	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21426		—	< 1:17.0.3.0.6-2.el8_5	1:17.0.3.0.6-2.el8_5	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21366	Med	5.3	< 1:17.0.2.0.8-4.el8_5	1:17.0.2.0.8-4.el8_5	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability
CVE-2022-21360	Med	5.3	< 1:17.0.2.0.8-4.el8_5	1:17.0.2.0.8-4.el8_5	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21341	Med	5.3	< 1:17.0.2.0.8-4.el8_5	1:17.0.2.0.8-4.el8_5	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploi

CVE-2023-21835Jan 17, 2023
affected < 1:17.0.6.0.10-3.el8_7fixed 1:17.0.6.0.10-3.el8_7
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable
CVE-2022-39399LowOct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to e
CVE-2022-21626MedOct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily expl
CVE-2022-21624LowOct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. D
CVE-2022-21619LowOct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.
CVE-2022-21618MedOct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows
CVE-2022-21628Oct 18, 2022
affected < 1:17.0.5.0.8-2.el9_0fixed 1:17.0.5.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 2
CVE-2022-21549MedJul 19, 2022
affected < 1:17.0.4.0.8-2.el9_0fixed 1:17.0.4.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allow
CVE-2022-21540MedJul 19, 2022
affected < 1:17.0.4.0.8-2.el9_0fixed 1:17.0.4.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-34169HigJul 19, 2022
affected < 1:17.0.4.0.8-2.el9_0fixed 1:17.0.4.0.8-2.el9_0
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update t
CVE-2022-21541Jul 19, 2022
affected < 1:17.0.4.0.8-2.el9_0fixed 1:17.0.4.0.8-2.el9_0
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-21476HigApr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21496Apr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21449Apr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerabilit
CVE-2022-21443Apr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Dif
CVE-2022-21434Apr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21426Apr 19, 2022
affected < 1:17.0.3.0.6-2.el8_5fixed 1:17.0.3.0.6-2.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21366MedJan 19, 2022
affected < 1:17.0.2.0.8-4.el8_5fixed 1:17.0.2.0.8-4.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability
CVE-2022-21360MedJan 19, 2022
affected < 1:17.0.2.0.8-4.el8_5fixed 1:17.0.2.0.8-4.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21341MedJan 19, 2022
affected < 1:17.0.2.0.8-4.el8_5fixed 1:17.0.2.0.8-4.el8_5
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploi

Page 4 of 5