Search CVE reports
11 – 20 of 242 results
CVE-2022-21541
Medium prioritySome fixes available 22 of 38
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21540
Medium prioritySome fixes available 22 of 38
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-34169
Medium prioritySome fixes available 18 of 36
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute...
11 affected packages
icedtea-web, libxalan2-java, openjdk-12, openjdk-13, openjdk-15...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Not affected | Not affected | Not affected | Not affected | Not affected |
| libxalan2-java | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Not affected | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2015-5236
Negligible priorityIt was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) checks. As the specified codebase does not have to match the applet's...
1 affected package
icedtea-web
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2022-33068
Medium prioritySome fixes available 7 of 27
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
13 affected packages
harfbuzz, icedtea-web, openjdk-12, openjdk-13, openjdk-15...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| harfbuzz | Fixed | Fixed | Fixed | Not affected | Not affected |
| icedtea-web | Not affected | Not affected | Not affected | Not affected | Not affected |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Not affected | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Not affected | Not in release | Not in release |
| openjdk-17 | Not affected | Not affected | Not affected | Not affected | Not in release |
| openjdk-18 | Not in release | Not affected | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Not affected | Not affected | Not affected | Not affected |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Not affected | Not affected | Not affected | Not affected | Not in release |
| qt6-base | Needs evaluation | Needs evaluation | — | — | — |
| qtwebengine-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
CVE-2022-21496
Medium prioritySome fixes available 25 of 39
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21476
Medium prioritySome fixes available 25 of 39
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21449
High prioritySome fixes available 8 of 10
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition:...
8 affected packages
icedtea-web, openjdk-13, openjdk-16, openjdk-17, openjdk-18...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | — | Not affected | Not affected | Not affected | Not affected |
| openjdk-13 | — | Not in release | Not affected | Not in release | Not in release |
| openjdk-16 | — | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | — | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | — | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | — | Not affected | Not affected | Not affected | Not affected |
| openjdk-9 | — | Not in release | Not in release | Not in release | Not affected |
| openjdk-lts | — | Not affected | Not affected | Not affected | Not in release |
CVE-2022-21443
Medium prioritySome fixes available 25 of 39
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21434
Medium prioritySome fixes available 25 of 39
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |