DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE und OpenJDK: Mehrere Schwachstellen
view advisory published 2022-01-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und OpenJDK ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-21366US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0… | ||||
| CVE-2022-21365US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u32… | ||||
| CVE-2022-21360US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u32… | ||||
| CVE-2022-21349US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u… | ||||
| CVE-2022-21341US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE… | ||||
| CVE-2022-21340US | medium5.0 | Exploit | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u… | ||||
| CVE-2022-21305US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u32… | ||||
| CVE-2022-21299US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321,… | ||||
| CVE-2022-21296US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321,… | ||||
| CVE-2022-21294US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u… | ||||
| CVE-2022-21293US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u… | ||||
| CVE-2022-21291US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u32… | ||||
| CVE-2022-21283US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 11… | ||||
| CVE-2022-21282US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321,… | ||||
| CVE-2022-21277US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0… | ||||
| CVE-2022-21271US | medium5.0 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u… | ||||
| CVE-2022-21248US | medium4.3 | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE… | ||||
| CVE-2021-22959US | medium6.5 | — | ||
The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2022-0161 vom 2022-01-19external
- Red Hat Security Advisory RHSA-2022:0161 vom 2022-01-19external
- Red Hat Security Advisory RHSA-2022:0165 vom 2022-01-24external
- Red Hat Security Advisory RHSA-2022:0166 vom 2022-01-24external
- Red Hat Security Advisory RHSA-2022:0185 vom 2022-01-24external
- Red Hat Security Advisory RHSA-2022:0204 vom 2022-01-24external
- Red Hat Security Advisory RHSA-2022:0209 vom 2022-01-24external
- Red Hat Security Advisory RHSA-2022:0211 vom 2022-01-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan