Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 15

• High 8.6
  CVE-2021-3517 EPSS 17%

  Nokogiri contains libxml Out-of-bounds Write vulnerability

  There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds …

  qt5-qtwebengine libxml2 libxml2 nokogiri Debian Ubuntu Alpine RubyGems
  May 19, 2021
• High 7.5
  CVE-2021-27290

  Regular Expression Denial of Service (ReDoS)

  ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the stri…

  nodejs ssri node-ssri node-ssri Debian Ubuntu Alpine npm
  Mar 12, 2021
• High 7.5
  CVE-2021-35560

  Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected …

  Oracle Java SE JDK and JRE
  Oct 20, 2021
• Medium 6.8
  CVE-2021-35567

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Suppo…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.9
  CVE-2021-35550

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.5
  CVE-2021-3522

  GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

  gst-plugins-base1.0 gst-plugins-base1.0 gst-plugins-base Debian Ubuntu Alpine
  Jun 2, 2021
• Medium 5.3
  CVE-2021-35556

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35559 EPSS 16%

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35561

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35564

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35565

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35578

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35586

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Low 3.7
  CVE-2021-35603

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Low 3.1
  CVE-2021-35588

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-9 Ubuntu Alpine
  Oct 20, 2021

Revision history

1. 2026-11-11 #26

   Neue Updates von NetApp aufgenommen

2. 2025-01-21 #25

   Neue Updates aufgenommen

3. 2024-09-29 #24

   Neue Updates von Gentoo aufgenommen

4. 2024-05-30 #23

   Neue Updates von Amazon aufgenommen

5. 2023-07-02 #22

   Neue Updates aufgenommen

6. 2023-05-02 #21

   Neue Updates von IBM aufgenommen

7. 2022-10-03 #20

   Neue Updates von IBM aufgenommen

8. 2022-09-28 #19

   Neue Updates von IBM aufgenommen

9. 2022-09-20 #18

   Neue Updates von IBM aufgenommen

10. 2022-08-03 #17

    Neue Updates von SUSE und Red Hat aufgenommen

11. 2022-08-02 #16

    Neue Updates von BROCADE aufgenommen

12. 2022-07-24 #15

    Neue Updates von SUSE aufgenommen

13. 2022-07-21 #14

    Neue Updates von HCL aufgenommen

14. 2022-06-08 #13

    Neue Updates von Red Hat aufgenommen

15. 2022-05-10 #12

    Neue Updates von IBM aufgenommen

16. 2022-03-20 #11

    Neue Updates von Red Hat aufgenommen

17. 2022-02-03 #10

    Neue Updates von IBM aufgenommen

18. 2022-02-01 #9

    Neue Updates von Red Hat aufgenommen

19. 2022-01-27 #8

    Neue Updates von Red Hat aufgenommen

20. 2022-01-24 #7

    Neue Updates von SUSE aufgenommen

21. 2022-01-18 #6

    Neue Updates von SUSE aufgenommen

22. 2021-12-08 #5

    Neue Updates von Red Hat aufgenommen

23. 2021-11-04 #4

    Neue Updates von Amazon aufgenommen

24. 2021-11-02 #3

    Neue Updates von XEROX aufgenommen

25. 2021-10-20 #2

    Neue Updates von Red Hat aufgenommen

References

• Oracle Critical Patch Update Advisory - October 2021 - Appendix Oracle Java SE vom 2021-10-19
  https://www.oracle.com/security-alerts/cpuoct2021.html#AppendixJAVA
• Red Hat Security Advisory RHSA-2021:3885 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3885
• Red Hat Security Advisory RHSA-2021:3884 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3884
• Red Hat Security Advisory RHSA-2021:3893 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3893
• Red Hat Security Advisory RHSA-2021:3886 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3886
• Red Hat Security Advisory RHSA-2021:3889 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3889
• Oracle Linux Security Advisory ELSA-2021-3889 vom 2021-10-20
  https://linux.oracle.com/errata/ELSA-2021-3889.html
• Oracle Linux Security Advisory ELSA-2021-3891 vom 2021-10-20
  https://linux.oracle.com/errata/ELSA-2021-3891.html
• Oracle Linux Security Advisory ELSA-2021-3892 vom 2021-10-21
  https://linux.oracle.com/errata/ELSA-2021-3892.html
• Oracle Linux Security Advisory ELSA-2021-3893 vom 2021-10-20
  https://linux.oracle.com/errata/ELSA-2021-3893.html
• Red Hat Security Advisory RHSA-2021:3887 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3887
• Red Hat Security Advisory RHSA-2021:3891 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3891
• Red Hat Security Advisory RHSA-2021:3892 vom 2021-10-20
  https://access.redhat.com/errata/RHSA-2021:3892
• XEROX Security Advisory XRX21-018 vom 2021-11-03
  https://securitydocs.business.xerox.com/wp-content/uploads/2021/11/XRX21-018_FFPSv2_Win10_SecurityBulletin_Nov2021.pdf
• Amazon Linux Security Advisory ALAS-2021-1718 vom 2021-11-04
  https://alas.aws.amazon.com/AL2/ALAS-2021-1718.html
• Red Hat Security Advisory RHSA-2021:5030 vom 2021-12-08
  https://access.redhat.com/errata/RHSA-2021:5030
• SUSE Security Update SUSE-SU-2022:14876-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010022.html
• SUSE Security Update SUSE-SU-2022:0107-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010011.html
• SUSE Security Update SUSE-SU-2022:0108-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010012.html
• SUSE Security Update SUSE-SU-2022:14875-1 vom 2022-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010014.html
• SUSE Security Update SUSE-SU-2022:0166-1 vom 2022-01-24
  https://lists.suse.com/pipermail/sle-security-updates/2022-January/010052.html
• Red Hat Security Advisory RHSA-2022:0310 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0310
• Red Hat Security Advisory RHSA-2022:0345 vom 2022-02-01
  https://access.redhat.com/errata/RHSA-2022:0345
• IBM Security Bulletin 6552314 vom 2022-02-04
  https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-october-2021-affects-ibm-infosphere-information-server-cve-2021-35578-cve-2021-35564/
• Red Hat Security Advisory RHSA-2022:0970 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0970
• Red Hat Security Advisory RHSA-2022:0968 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0968
• Red Hat Security Advisory RHSA-2022:0969 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0969
• IBM Security Bulletin 6566227 vom 2022-05-11
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-sdk-java-technology-edition-security-update-october-2021-2/
• Red Hat Security Advisory RHSA-2022:4957 vom 2022-06-09
  https://access.redhat.com/errata/RHSA-2022:4957
• Red Hat Security Advisory RHSA-2022:4959 vom 2022-06-09
  https://access.redhat.com/errata/RHSA-2022:4959
• HCL Article KB0099493 vom 2022-07-21
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099493
• SUSE Security Update SUSE-SU-2022:2540-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011646.html
• SUSE Security Update SUSE-SU-2022:2539-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011645.html
• Brocade Security Advisory BSA-2022-1688 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1688
• Brocade Security Advisory BSA-2022-1689 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1689
• Brocade Security Advisory BSA-2022-1690 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1690
• Brocade Security Advisory BSA-2022-1691 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1691
• Brocade Security Advisory BSA-2022-1692 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1692
• Brocade Security Advisory BSA-2022-1693 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1693
• Brocade Security Advisory BSA-2022-1694 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1694
• Brocade Security Advisory BSA-2022-1738 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1738
• Brocade Security Advisory BSA-2022-2026 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2026
• Brocade Security Advisory BSA-2022-2025 vom 2022-08-03
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2025
• SUSE Security Update SUSE-SU-2022:2650-1 vom 2022-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2022-August/011760.html
• Red Hat Security Advisory RHSA-2022:5837 vom 2022-08-03
  https://access.redhat.com/errata/RHSA-2022:5837
• IBM Security Bulletin 6621599 vom 2022-09-21
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-maximo-asset-management-is-vulnerable-to-authentication-bypass-cve-2022-40616/
• IBM Security Bulletin 6824773 vom 2022-09-29
  https://www.ibm.com/blogs/psirt/security-bulletin-txseries-for-multiplatforms-is-vulnerable-to-a-denial-of-service-exposure-due-to-ibm-sdk-java-technology-edition/
• IBM Security Bulletin 6825125 vom 2022-10-01
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-is-affected-by-multiple-vulnerabilities-in-ibm-runtime-environment-java-technology-edition-version-8/
• IBM Security Bulletin 6987741 vom 2023-05-02
  https://www.ibm.com/support/pages/node/6987741
• Kyocera Firmwareneuheiten im Juni 2023 vom 2023-07-03
  https://kyocommunity.kyocera.de/lexicon/index.php
• Amazon Linux Security Advisory ALASCORRETTO8-2024-012 vom 2024-05-30
  https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2024-012.html
• Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2024-009 vom 2024-05-30
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2024-009.html
• Gentoo Linux Security Advisory GLSA-202409-26 vom 2024-09-28
  https://security.gentoo.org/glsa/202409-26
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md
• NetApp Security Advisory NTAP-20211022-0004 vom 2026-11-12
  https://security.netapp.com/advisory/NTAP-20211022-0004