Search for packages
| purl | pkg:deb/debian/openjdk-11@11.0.24%2B8-2~deb11u1 |
| Next non-vulnerable version | 11.0.31~10ea-1 |
| Latest non-vulnerable version | 11.0.31~10ea-1 |
| Risk | 3.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-11vj-5zz4-6fe7
Aliases: CVE-2025-30698 |
openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-13t7-vubq-8kae
Aliases: CVE-2025-53057 |
openjdk: Enhance certificate handling (Oracle CPU 2025-10) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-4snj-etwf-eqe8
Aliases: CVE-2026-21933 |
openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-6196-gvhx-ruh8
Aliases: CVE-2024-21235 |
Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9n5v-4daz-eyc2
Aliases: CVE-2024-21217 |
Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-apsn-z1br-3bdy
Aliases: CVE-2026-21945 |
openjdk: Enhance Certificate Checking (Oracle CPU 2026-01) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-b32x-4pu4-jkh4
Aliases: CVE-2025-30749 |
openjdk: Better Glyph drawing (Oracle CPU 2025-07) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-duy9-6f1p-vqah
Aliases: CVE-2026-21932 |
openjdk: Enhance Handling of URIs (Oracle CPU 2026-01) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-e6dm-6767-9kdk
Aliases: CVE-2025-50059 |
openjdk: Improve HTTP client header handling (Oracle CPU 2025-07) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-mt9c-tby1-wqe9
Aliases: CVE-2026-21925 |
openjdk: Improve JMX connections (Oracle CPU 2026-01) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ntga-y6cv-a3df
Aliases: CVE-2025-21502 |
openjdk: Enhance array handling (Oracle CPU 2025-01) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-nxx8-nehy-qyhg
Aliases: CVE-2025-53066 |
openjdk: Enhance Path Factories (Oracle CPU 2025-10) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-p9na-7jta-9yg4
Aliases: CVE-2025-30754 |
openjdk: Enhance TLS protocol support (Oracle CPU 2025-07) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-u81s-cs95-4yhx
Aliases: CVE-2025-21587 |
openjdk: Better TLS connection support (Oracle CPU 2025-04) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vbw8-4j9f-eya5
Aliases: CVE-2025-50106 |
openjdk: Glyph out-of-memory access and crash (Oracle CPU 2025-07) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vpnc-yu7r-bqb6
Aliases: CVE-2024-21208 |
Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-y8bc-k5qu-c7f5
Aliases: CVE-2025-30691 |
openjdk: Improve compiler transformations (Oracle CPU 2025-04) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-z356-tw9t-q7bp
Aliases: CVE-2024-21210 |
Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zkz6-9t74-5bb4
Aliases: CVE-2025-30761 |
openjdk: Improve scripting supports (Oracle CPU 2025-07) |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2tju-1r8k-sbf9 | OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) |
CVE-2024-21094
|
| VCID-3tav-ffar-hfhb | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2023-21843
|
| VCID-47ae-xdqr-6qgb | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which can lead to remote code execution. |
CVE-2022-21540
|
| VCID-5et1-ytak-xqh7 | OpenJDK: Excessive symbol length can lead to infinite loop (8319859) |
CVE-2024-21138
|
| VCID-76rb-sg3r-bqce | OpenJDK: potential UTF8 size overflow (8314794) |
CVE-2024-21131
|
| VCID-8cup-qnc8-wudx | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20952
|
| VCID-8wud-7t2q-xfa3 | OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) |
CVE-2023-21968
|
| VCID-9urr-3gt2-mfhe | OpenJDK: long Exception message leading to crash (8319851) |
CVE-2024-21011
|
| VCID-9uzg-sja9-hkcy | OpenJDK: Swing HTML parsing issue (8296832) |
CVE-2023-21939
|
| VCID-a282-ksr4-j3cu | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22081
|
| VCID-a3xk-3wya-s3gm | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2023-21835
|
| VCID-a59u-h67v-yygm | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22041
|
| VCID-dwh6-xw5k-mqg8 | OpenJDK: missing string checks for NULL characters (8296622) |
CVE-2023-21937
|
| VCID-dyg2-udwy-cud7 | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22045
|
| VCID-fau4-ajny-nfbd | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20921
|
| VCID-fhj9-p1gx-c7hp | OpenJDK: incorrect enqueue of references in garbage collector (8298191) |
CVE-2023-21954
|
| VCID-fwk5-wqvn-4qaz | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20926
|
| VCID-fwv1-sj5y-xygd | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2022-21619
|
| VCID-gjgy-dfq7-zfb2 | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22049
|
| VCID-h2w2-8e43-j3g6 | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2022-21624
|
| VCID-h7n1-qfs3-v3fw | OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) |
CVE-2024-21012
|
| VCID-htat-fksw-c3gk | OpenJDK: Pack200 excessive memory allocation (8322114) |
CVE-2024-21085
|
| VCID-jm9f-9y4b-qye7 | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2022-39399
|
| VCID-jw6x-cntu-nfht | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22036
|
| VCID-jztz-7cuw-t7ep | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20945
|
| VCID-kq78-adbv-67a7 | OpenJDK: improper connection handling during TLS handshake (8294474) |
CVE-2023-21930
|
| VCID-n71d-tx76-vbbd | OpenJDK: Out-of-bounds access in 2D image handling (8324559) |
CVE-2024-21145
|
| VCID-nr6u-aysf-7kgk | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20919
|
| VCID-q5gr-6u92-6ybk | OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) |
CVE-2023-21938
|
| VCID-q9r9-wkqu-6bhu | OpenJDK: Pack200 increase loading time due to improper header validation (8322106) |
CVE-2024-21144
|
| VCID-rfs8-njaq-qkc8 | Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. A fix for this issue was published in September 2022 as part of an anticipated 2.7.3 release. |
CVE-2022-34169
GHSA-9339-86wc-4qgf |
| VCID-rggy-f3va-mfay | OpenJDK: RangeCheckElimination array index overflow (8323231) |
CVE-2024-21147
|
| VCID-t4r8-ujpb-5kdk | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which can lead to remote code execution. |
CVE-2022-21541
|
| VCID-t5sp-ea5b-f7af | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2022-21626
|
| VCID-um54-6ggz-gqf9 | Multiple vulnerabilities have been found in IcedTea, the worst of which could result in arbitrary code execution. |
CVE-2022-21628
|
| VCID-wn4r-ugaa-5ydb | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2024-20918
|
| VCID-x4ms-sbj7-aufu | Multiple vulnerabilities have been discovered in OpenJDK, the worst of which could lead to remote code execution. |
CVE-2023-22006
|
| VCID-xk2v-7cgk-13ex | OpenJDK: certificate validation issue in TLS session negotiation (8298310) |
CVE-2023-21967
|
| VCID-zdra-bzqn-4ug9 | OpenJDK: integer overflow in C1 compiler address generation (8322122) |
CVE-2024-21068
|
| VCID-zgpr-3zft-zqgt | OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) |
CVE-2024-21140
|