Search CVE reports
51 – 60 of 428 results
CVE-2022-21549
Medium prioritySome fixes available 13 of 27
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Not affected | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Not affected | Not affected | Not affected | Not affected |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21541
Medium prioritySome fixes available 20 of 35
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21540
Medium prioritySome fixes available 20 of 35
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-34169
Medium prioritySome fixes available 17 of 34
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute...
11 affected packages
icedtea-web, libxalan2-java, openjdk-12, openjdk-13, openjdk-15...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Not affected | Not affected | Not affected | Not affected | Not affected |
| libxalan2-java | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Not affected | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-33068
Medium prioritySome fixes available 6 of 24
An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
13 affected packages
harfbuzz, icedtea-web, openjdk-12, openjdk-13, openjdk-15...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| harfbuzz | Fixed | Fixed | Fixed | Not affected | Not affected |
| icedtea-web | Not affected | Not affected | Not affected | Not affected | Not affected |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Not affected | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Not affected | Not in release | Not in release |
| openjdk-17 | Not affected | Not affected | Not affected | Not affected | Not in release |
| openjdk-18 | Not in release | Not affected | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Not affected | Not affected | Not affected | Not affected |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Not affected | Not affected | Not affected | Not affected | Not in release |
| qt6-base | Needs evaluation | Needs evaluation | — | — | — |
| qtwebengine-opensource-src | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
CVE-2022-21496
Medium prioritySome fixes available 23 of 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21476
Medium prioritySome fixes available 23 of 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21449
High prioritySome fixes available 8 of 10
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition:...
8 affected packages
icedtea-web, openjdk-13, openjdk-16, openjdk-17, openjdk-18...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | — | Not affected | Not affected | Not affected | Not affected |
| openjdk-13 | — | Not in release | Not affected | Not in release | Not in release |
| openjdk-16 | — | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | — | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | — | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | — | Not affected | Not affected | Not affected | Not affected |
| openjdk-9 | — | Not in release | Not in release | Not in release | Not affected |
| openjdk-lts | — | Not affected | Not affected | Not affected | Not in release |
CVE-2022-21443
Medium prioritySome fixes available 23 of 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |
CVE-2022-21434
Medium prioritySome fixes available 23 of 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM...
10 affected packages
icedtea-web, openjdk-12, openjdk-13, openjdk-15, openjdk-16...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| openjdk-12 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-13 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-15 | Not in release | Not in release | Not in release | Not in release | Not in release |
| openjdk-16 | Not in release | Not in release | Ignored | Not in release | Not in release |
| openjdk-17 | Fixed | Fixed | Fixed | Fixed | Not in release |
| openjdk-18 | Not in release | Fixed | Not in release | Not in release | Not in release |
| openjdk-8 | Not affected | Fixed | Fixed | Fixed | Fixed |
| openjdk-9 | Not in release | Not in release | Not in release | Not in release | Ignored |
| openjdk-lts | Fixed | Fixed | Fixed | Fixed | Not in release |