VulnerableCode Package Details - pkg:deb/debian/openjdk-11@11.0.20%2B8-1~deb11u1

Search for packages

Vulnerability	Summary	Fixed by
VCID-2c9v-wx1h-aaak Aliases: CVE-2023-22081	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 20.0.2; Oracle GraalVM for JDK: 17.0.8 and 20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).	11.0.21+9-1~deb11u1 Affected by 0 other vulnerabilities. 11.0.22+7-1~deb11u1 Affected by 0 other vulnerabilities. 11.0.22+7-2 Affected by 16 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-dgfd-yp1k-aaaa Aliases: CVE-2023-22067	Vulnerability in Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381 and 8u381-perf. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).	11.0.21+9-1~deb11u1 Affected by 0 other vulnerabilities. 11.0.22+7-1~deb11u1 Affected by 0 other vulnerabilities. 11.0.22+7-2 Affected by 16 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-2c9v-wx1h-aaak
Aliases:
CVE-2023-22081

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 20.0.2; Oracle GraalVM for JDK: 17.0.8 and 20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

11.0.21+9-1~deb11u1
Affected by 0 other vulnerabilities.

11.0.22+7-1~deb11u1
Affected by 0 other vulnerabilities.

11.0.22+7-2
Affected by 16 other vulnerabilities.

VCID-dgfd-yp1k-aaaa
Aliases:
CVE-2023-22067

Vulnerability in Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u381 and 8u381-perf. Easily exploitable vulnerability allows unauthenticated attacker with network access via CORBA to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

11.0.21+9-1~deb11u1
Affected by 0 other vulnerabilities.

11.0.22+7-1~deb11u1
Affected by 0 other vulnerabilities.

11.0.22+7-2
Affected by 16 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2024-01-12T11:37:05.356603+00:00	Debian Importer	Affected by	VCID-2c9v-wx1h-aaak	None	34.0.0rc2
2024-01-12T11:37:03.480751+00:00	Debian Importer	Affected by	VCID-dgfd-yp1k-aaaa	None	34.0.0rc2
2024-01-12T11:36:52.032929+00:00	Debian Importer	Fixing	VCID-vrgz-jwc7-aaaa	None	34.0.0rc2
2024-01-12T11:36:37.180726+00:00	Debian Importer	Fixing	VCID-xeyf-mtzb-aaas	None	34.0.0rc2
2024-01-12T11:36:16.748447+00:00	Debian Importer	Fixing	VCID-g6se-dqzf-aaac	None	34.0.0rc2
2024-01-12T11:36:00.105859+00:00	Debian Importer	Fixing	VCID-zgsd-ywbr-aaah	None	34.0.0rc2
2024-01-12T11:35:28.193238+00:00	Debian Importer	Fixing	VCID-qhjf-huk4-aaac	None	34.0.0rc2
2024-01-12T11:35:16.168555+00:00	Debian Importer	Fixing	VCID-7vqf-z5c4-aaar	None	34.0.0rc2
2024-01-12T11:35:04.561172+00:00	Debian Importer	Fixing	VCID-227g-m2m1-aaas	None	34.0.0rc2
2024-01-12T11:34:47.123146+00:00	Debian Importer	Fixing	VCID-8dm2-h857-aaas	None	34.0.0rc2
2024-01-12T11:34:35.487903+00:00	Debian Importer	Fixing	VCID-bd97-p9nm-aaah	None	34.0.0rc2
2024-01-12T11:34:28.255087+00:00	Debian Importer	Fixing	VCID-ky57-vt2p-aaaq	None	34.0.0rc2
2024-01-12T11:34:16.727875+00:00	Debian Importer	Fixing	VCID-7v66-vcfm-aaac	None	34.0.0rc2
2024-01-12T11:34:10.187505+00:00	Debian Importer	Fixing	VCID-np2w-zymb-aaab	None	34.0.0rc2
2024-01-12T11:34:01.397412+00:00	Debian Importer	Fixing	VCID-gz78-tzq6-aaaq	None	34.0.0rc2
2024-01-12T11:33:58.369285+00:00	Debian Importer	Fixing	VCID-9jhx-sw3v-aaaj	None	34.0.0rc2
2024-01-12T02:44:46.888450+00:00	Debian Importer	Fixing	VCID-ej63-5eqx-aaap	None	34.0.0rc2
2024-01-11T13:49:57.085599+00:00	Debian Importer	Fixing	VCID-2jjh-jxxw-aaaq	None	34.0.0rc2
2024-01-11T13:49:53.022286+00:00	Debian Importer	Fixing	VCID-uue7-4r46-aaad	None	34.0.0rc2
2024-01-11T13:49:45.279272+00:00	Debian Importer	Fixing	VCID-m3x8-hg7n-aaag	None	34.0.0rc2
2024-01-11T13:48:24.744598+00:00	Debian Importer	Fixing	VCID-g1cf-12bg-aaaa	None	34.0.0rc2
2024-01-05T07:47:08.378766+00:00	Debian Importer	Affected by	VCID-2c9v-wx1h-aaak	None	34.0.0rc1
2024-01-05T07:47:06.784373+00:00	Debian Importer	Affected by	VCID-dgfd-yp1k-aaaa	None	34.0.0rc1
2024-01-05T07:46:57.668870+00:00	Debian Importer	Fixing	VCID-vrgz-jwc7-aaaa	None	34.0.0rc1
2024-01-05T07:46:42.795721+00:00	Debian Importer	Fixing	VCID-xeyf-mtzb-aaas	None	34.0.0rc1
2024-01-05T07:46:21.190677+00:00	Debian Importer	Fixing	VCID-g6se-dqzf-aaac	None	34.0.0rc1
2024-01-05T07:46:07.122532+00:00	Debian Importer	Fixing	VCID-zgsd-ywbr-aaah	None	34.0.0rc1
2024-01-05T07:45:49.313187+00:00	Debian Importer	Fixing	VCID-qhjf-huk4-aaac	None	34.0.0rc1
2024-01-05T07:45:40.900352+00:00	Debian Importer	Fixing	VCID-7vqf-z5c4-aaar	None	34.0.0rc1
2024-01-05T07:45:34.105169+00:00	Debian Importer	Fixing	VCID-227g-m2m1-aaas	None	34.0.0rc1
2024-01-05T07:45:26.188984+00:00	Debian Importer	Fixing	VCID-8dm2-h857-aaas	None	34.0.0rc1
2024-01-05T07:45:17.102159+00:00	Debian Importer	Fixing	VCID-bd97-p9nm-aaah	None	34.0.0rc1
2024-01-05T07:45:11.498913+00:00	Debian Importer	Fixing	VCID-ky57-vt2p-aaaq	None	34.0.0rc1
2024-01-05T07:45:04.183861+00:00	Debian Importer	Fixing	VCID-7v66-vcfm-aaac	None	34.0.0rc1
2024-01-05T07:44:57.467813+00:00	Debian Importer	Fixing	VCID-np2w-zymb-aaab	None	34.0.0rc1
2024-01-05T07:44:49.006478+00:00	Debian Importer	Fixing	VCID-gz78-tzq6-aaaq	None	34.0.0rc1
2024-01-05T07:44:46.066993+00:00	Debian Importer	Fixing	VCID-9jhx-sw3v-aaaj	None	34.0.0rc1
2024-01-05T04:45:02.259721+00:00	Debian Importer	Fixing	VCID-ej63-5eqx-aaap	None	34.0.0rc1
2024-01-04T23:23:16.395916+00:00	Debian Importer	Fixing	VCID-2jjh-jxxw-aaaq	None	34.0.0rc1
2024-01-04T23:23:12.602141+00:00	Debian Importer	Fixing	VCID-uue7-4r46-aaad	None	34.0.0rc1
2024-01-04T23:23:05.421199+00:00	Debian Importer	Fixing	VCID-m3x8-hg7n-aaag	None	34.0.0rc1
2024-01-04T23:21:39.261318+00:00	Debian Importer	Fixing	VCID-g1cf-12bg-aaaa	None	34.0.0rc1

2024-01-12T11:37:05.356603+00:00

Debian Importer

Affected by

purl	pkg:deb/debian/openjdk-11@11.0.20%2B8-1~deb11u1
Tags	Ghost

Next non-vulnerable version	11.0.28~3ea-1
Latest non-vulnerable version	11.0.28~3ea-1
Risk	3.1