rpm package

suse/java-1_8_0-ibm&distro=SUSE Enterprise Storage 7

pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Enterprise%20Storage%207

Vulnerabilities (67)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-40609	Hig	8.1	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Aug 2, 2023	IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the
CVE-2023-22049	Low	3.7	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition
CVE-2023-22045	Low	3.7	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition:
CVE-2023-22044	Low	3.7	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2;
CVE-2023-22041	Med	5.1	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10
CVE-2023-22036	Low	3.7	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22
CVE-2023-22006	Low	3.1	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Jul 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,
CVE-2023-2597	Hig	7.0	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	May 22, 2023	In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.
CVE-2023-30441	Hig	7.5	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 29, 2023	IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVE-2023-21968	Low	3.7	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1
CVE-2023-21967	Med	5.9	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Dif
CVE-2023-21954	Med	5.9	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Diff
CVE-2023-21939	Med	5.3	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Ea
CVE-2023-21938	Low	3.7	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0
CVE-2023-21937	Low	3.7	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.
CVE-2023-21930	Hig	7.4	< 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1	Apr 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Dif
CVE-2023-25193	Hig	7.5	< 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1	Feb 4, 2023	hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVE-2023-21843	Low	3.7	< 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1	Jan 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0
CVE-2023-21835	Med	5.3	< 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1	Jan 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable
CVE-2023-21830	Med	5.3	< 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1	Jan 18, 2023	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vuln

CVE-2022-40609HigAug 2, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the
CVE-2023-22049LowJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition
CVE-2023-22045LowJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition:
CVE-2023-22044LowJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 21.3.6, 22.3.2;
CVE-2023-22041MedJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10
CVE-2023-22036LowJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22
CVE-2023-22006LowJul 18, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,
CVE-2023-2597HigMay 22, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ9 builds) the size of a string is not properly checked against the size of the buffer.
CVE-2023-30441HigApr 29, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVE-2023-21968LowApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1
CVE-2023-21967MedApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Dif
CVE-2023-21954MedApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Diff
CVE-2023-21939MedApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Ea
CVE-2023-21938LowApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0
CVE-2023-21937LowApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.
CVE-2023-21930HigApr 18, 2023
affected < 1.8.0_sr8.5-150000.3.74.1fixed 1.8.0_sr8.5-150000.3.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Dif
CVE-2023-25193HigFeb 4, 2023
affected < 1.8.0_sr8.10-150000.3.80.1fixed 1.8.0_sr8.10-150000.3.80.1
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVE-2023-21843LowJan 18, 2023
affected < 1.8.0_sr8.0-150000.3.71.1fixed 1.8.0_sr8.0-150000.3.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0
CVE-2023-21835MedJan 18, 2023
affected < 1.8.0_sr8.0-150000.3.71.1fixed 1.8.0_sr8.0-150000.3.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable
CVE-2023-21830MedJan 18, 2023
affected < 1.8.0_sr8.0-150000.3.71.1fixed 1.8.0_sr8.0-150000.3.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vuln

Page 1 of 4