Oracle Java SE und OpenJDK: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• High 7.5
  CVE-2022-0778 Public exploit EPSS 73%

  Infinite loop in BN_mod_sqrt() reachable when parsing certificates

  The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  Mar 15, 2022
• High 7.5
  CVE-2022-21449 Public exploit EPSS 77%

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-16 openjdk-18 Debian Ubuntu Alpine Wolfi
  Apr 19, 2022
• High 7.5
  CVE-2022-21476

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 19, 2022
• Medium 5.3
  CVE-2022-21426

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 19, 2022
• Medium 5.3
  CVE-2022-21434

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 19, 2022
• Medium 5.3
  CVE-2022-21496

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 19, 2022
• Low 3.7
  CVE-2022-21443

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 19, 2022

Revision history

1. 2025-02-18 #44

   Neue Updates von openSUSE aufgenommen

2. 2025-01-21 #43

   Neue Updates aufgenommen

3. 2024-10-14 #42

   Neue Updates aufgenommen

4. 2023-10-24 #41

   Neue Updates von IBM aufgenommen

5. 2023-10-19 #40

   Neue Updates von IBM aufgenommen

6. 2023-10-03 #39

   Neue Updates von IBM aufgenommen

7. 2023-06-22 #38

   Neue Updates von IBM aufgenommen

8. 2023-05-21 #37

   Neue Updates von IBM aufgenommen

9. 2023-03-30 #36

   Neue Updates von IBM aufgenommen

10. 2022-10-12 #35

    Neue Updates aufgenommen

11. 2022-10-03 #34

    Neue Updates von IBM aufgenommen

12. 2022-09-28 #33

    Neue Updates von IBM aufgenommen

13. 2022-09-14 #32

    Neue Updates von Amazon aufgenommen

14. 2022-09-12 #31

    Neue Updates von Amazon aufgenommen

15. 2022-09-06 #30

    Neue Updates von SUSE aufgenommen

16. 2022-08-23 #29

    Neue Updates von Amazon aufgenommen

17. 2022-08-04 #28

    Neue Updates von Ubuntu aufgenommen

18. 2022-08-03 #27

    Neue Updates von SUSE und Red Hat aufgenommen

19. 2022-07-24 #26

    Neue Updates von SUSE aufgenommen

20. 2022-07-13 #25

    Neue Updates von EMC aufgenommen

21. 2022-07-03 #24

    Neue Updates von Oracle Linux aufgenommen

22. 2022-06-19 #23

    Neue Updates von AVAYA aufgenommen

23. 2022-06-08 #22

    Neue Updates von Red Hat aufgenommen

24. 2022-05-31 #21

    Anpassung

25. 2022-05-26 #20

    Neue Updates von Red Hat und HITACHI aufgenommen

References

• Oracle Critical Patch Update April 2022 - Appendix Oracle Java SE vom 2022-04-19
  https://www.oracle.com/security-alerts/cpuapr2022.html#AppendixJAVA
• OpenJDK Vulnerability Advisory
  https://openjdk.java.net/groups/vulnerability/advisories/2022-04-19
• Oracle Linux Security Advisory ELSA-2022-1440 vom 2022-04-20
  http://linux.oracle.com/errata/ELSA-2022-1440.html
• Red Hat Security Advisory RHSA-2022:1444 vom 2022-04-20
  https://access.redhat.com/errata/RHSA-2022:1444
• Red Hat Security Advisory RHSA-2022:1443 vom 2022-04-21
  https://access.redhat.com/errata/RHSA-2022:1443
• Red Hat Security Advisory RHSA-2022:1442 vom 2022-04-20
  https://access.redhat.com/errata/RHSA-2022:1442
• Red Hat Security Advisory RHSA-2022:1441 vom 2022-04-20
  https://access.redhat.com/errata/RHSA-2022:1441
• Red Hat Security Advisory RHSA-2022:1440 vom 2022-04-20
  https://access.redhat.com/errata/RHSA-2022:1440
• Red Hat Security Advisory RHSA-2022:1445 vom 2022-04-20
  https://access.redhat.com/errata/RHSA-2022:1445
• Oracle Linux Security Advisory ELSA-2022-1442 vom 2022-04-20
  http://linux.oracle.com/errata/ELSA-2022-1442.html
• CVE-2022-21449 PoC vom 2022-04-21
  https://github.com/khalednassar/CVE-2022-21449-TLS-PoC
• Oracle Linux Security Advisory ELSA-2022-1445 vom 2022-04-21
  https://linux.oracle.com/errata/ELSA-2022-1445.html
• Red Hat Security Advisory RHSA-2022:1490 vom 2022-04-25
  https://access.redhat.com/errata/RHSA-2022:1490
• Oracle Linux Security Advisory ELSA-2022-1491 vom 2022-04-26
  http://linux.oracle.com/errata/ELSA-2022-1491.html
• Oracle Linux Security Advisory ELSA-2022-1487 vom 2022-04-26
  http://linux.oracle.com/errata/ELSA-2022-1487.html
• Red Hat Security Advisory RHSA-2022:1491 vom 2022-04-25
  https://access.redhat.com/errata/RHSA-2022:1491
• Red Hat Security Advisory RHSA-2022:1489 vom 2022-04-25
  https://access.redhat.com/errata/RHSA-2022:1489
• Red Hat Security Advisory RHSA-2022:1487 vom 2022-04-25
  https://access.redhat.com/errata/RHSA-2022:1487
• Red Hat Security Advisory RHSA-2022:1488 vom 2022-04-25
  https://access.redhat.com/errata/RHSA-2022:1488
• Ubuntu Security Notice USN-5388-1 vom 2022-04-26
  https://ubuntu.com/security/notices/USN-5388-1
• Ubuntu Security Notice USN-5388-2 vom 2022-04-26
  https://ubuntu.com/security/notices/USN-5388-2
• Amazon Linux Security Advisory ALAS-2022-1791 vom 2022-04-27
  https://alas.aws.amazon.com/AL2/ALAS-2022-1791.html
• Amazon Linux Security Advisory ALAS-2022-1790 vom 2022-04-27
  https://alas.aws.amazon.com/AL2/ALAS-2022-1790.html
• Amazon Linux Security Advisory ALAS-2022-1778 vom 2022-04-27
  https://alas.aws.amazon.com/AL2/ALAS-2022-1778.html
• AVAYA Security Advisory ASA-2022-038 vom 2022-04-26
  https://downloads.avaya.com/css/P8/documents/101081600
• Red Hat Security Advisory RHSA-2022:1439 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1439
• Red Hat Security Advisory RHSA-2022:1492 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1492
• Amazon Linux Security Advisory ALAS2CORRETTO8-2022-002 vom 2022-04-28
  https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2022-002.html
• Red Hat Security Advisory RHSA-2022:1435 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1435
• AVAYA Security Advisory ASA-2022-039 vom 2022-04-27
  https://downloads.avaya.com/css/P8/documents/101081609
• Red Hat Security Advisory RHSA-2022:1436 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1436
• Red Hat Security Advisory RHSA-2022:1437 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1437
• Red Hat Security Advisory RHSA-2022:1438 vom 2022-04-29
  https://access.redhat.com/errata/RHSA-2022:1438
• NetApp Security Advisory NTAP-20220429-0006 vom 2022-04-29
  https://security.netapp.com/advisory/ntap-20220429-0006/
• SUSE Security Update SUSE-SU-2022:1474-1 vom 2022-04-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-April/010900.html
• Red Hat Security Advisory RHSA-2022:1520 vom 2022-05-02
  https://access.redhat.com/errata/RHSA-2022:1520
• Red Hat Security Advisory RHSA-2022:1519 vom 2022-05-02
  https://access.redhat.com/errata/RHSA-2022:1519
• SUSE Security Update SUSE-SU-2022:1513-1 vom 2022-05-03
  https://lists.suse.com/pipermail/sle-security-updates/2022-May/010919.html
• Debian Security Advisory DSA-5128 vom 2022-05-03
  https://lists.debian.org/debian-security-announce/2022/msg00096.html
• Red Hat Security Advisory RHSA-2022:1622 vom 2022-05-04
  https://access.redhat.com/errata/RHSA-2022:1622
• Debian Security Advisory DSA-5131 vom 2022-05-05
  https://lists.debian.org/debian-security-announce/2022/msg00099.html
• Red Hat Security Advisory RHSA-2022:1679 vom 2022-05-10
  https://access.redhat.com/errata/RHSA-2022:1679
• Red Hat Security Advisory RHSA-2022:2218 vom 2022-05-12
  https://access.redhat.com/errata/RHSA-2022:2218
• Red Hat Security Advisory RHSA-2022:2217 vom 2022-05-12
  https://access.redhat.com/errata/RHSA-2022:2217
• Red Hat Security Advisory RHSA-2022:2216 vom 2022-05-12
  https://access.redhat.com/errata/RHSA-2022:2216
• Red Hat Security Advisory RHSA-2022:1699 vom 2022-05-13
  https://access.redhat.com/errata/RHSA-2022:1699
• CentOS Security Advisory CESA-2022:1487 vom 2022-05-13
  https://lists.centos.org/pipermail/centos-announce/2022-May/073583.html
• Debian Security Advisory DLA-3006 vom 2022-05-14
  https://lists.debian.org/debian-lts-announce/2022/05/msg00017.html
• CentOS Security Advisory CESA-2022:1440 vom 2022-05-13
  https://lists.centos.org/pipermail/centos-announce/2022-May/073586.html
• Red Hat Security Advisory RHSA-2022:1728 vom 2022-05-20
  https://access.redhat.com/errata/RHSA-2022:1728
• Red Hat Security Advisory RHSA-2022:2137 vom 2022-05-20
  https://access.redhat.com/errata/RHSA-2022:2137
• Red Hat Security Advisory RHSA-2022:1729 vom 2022-05-20
  https://access.redhat.com/errata/RHSA-2022:1729
• Release Notes für Security Event Manager
  https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-2-1_release_notes.htm
• Red Hat Security Advisory RHSA-2022:2272 vom 2022-05-26
  https://access.redhat.com/errata/RHSA-2022:2272
• Hitachi Vulnerability Information HITACHI-SEC-2022-113 vom 2022-05-27
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-113/index.html
• Red Hat Security Advisory RHSA-2022:4957 vom 2022-06-09
  https://access.redhat.com/errata/RHSA-2022:4957
• Red Hat Security Advisory RHSA-2022:4959 vom 2022-06-09
  https://access.redhat.com/errata/RHSA-2022:4959
• AVAYA Security Advisory ASA-2022-038 vom 2022-06-08
  https://download.avaya.com/css/public/documents/101082271
• Oracle Linux Security Advisory ELSA-2022-1728 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-1728.html
• Oracle Linux Security Advisory ELSA-2022-2137 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-2137.html
• Oracle Linux Security Advisory ELSA-2022-1729 vom 2022-07-01
  http://linux.oracle.com/errata/ELSA-2022-1729.html
• EMC Security Advisory DSA-2022-189 vom 2022-07-14
  https://www.dell.com/support/kbdoc/de-de/000201463/dsa-2022-189-dell-emc-networker-runtime-environment-nre-security-update-for-java-se-embedded-vulnerabilities
• SUSE Security Update SUSE-SU-2022:2540-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011646.html
• SUSE Security Update SUSE-SU-2022:2530-1 vom 2022-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011636.html
• SUSE Security Update SUSE-SU-2022:2531-1 vom 2022-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011635.html
• SUSE Security Update SUSE-SU-2022:2539-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011645.html
• SUSE Security Update SUSE-SU-2022:2650-1 vom 2022-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2022-August/011760.html
• Red Hat Security Advisory RHSA-2022:5837 vom 2022-08-03
  https://access.redhat.com/errata/RHSA-2022:5837
• Ubuntu Security Notice USN-5546-2 vom 2022-08-04
  https://ubuntu.com/security/notices/USN-5546-2
• Ubuntu Security Notice USN-5546-1 vom 2022-08-04
  https://ubuntu.com/security/notices/USN-5546-1
• Amazon Linux Security Advisory ALAS-2022-1631 vom 2022-08-23
  https://alas.aws.amazon.com/ALAS-2022-1631.html
• SUSE Security Update SUSE-SU-2022:3092-1 vom 2022-09-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-September/012103.html
• Amazon Linux Security Advisory ALAS-2022-1633 vom 2022-09-12
  https://alas.aws.amazon.com/ALAS-2022-1633.html
• Amazon Linux Security Advisory ALAS2JAVA-OPENJDK11-2022-002 vom 2022-09-15
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2022-002.html
• Amazon Linux Security Advisory ALAS-2022-1835 vom 2022-09-15
  https://alas.aws.amazon.com/AL2/ALAS-2022-1835.html
• IBM Security Bulletin 6824717 vom 2022-09-29
  https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-semeru-runtime-affect-spss-collaboration-and-deployment-services-cve-2022-21496-cve-2022-21426/
• IBM Security Bulletin 6824713 vom 2022-09-29
  https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-ibm-java-runtime-affects-spss-collaboration-and-deployment-services-cve-2022-21496/
• IBM Security Bulletin 6824763 vom 2022-09-29
  https://www.ibm.com/blogs/psirt/security-bulletin-txseries-for-multiplatforms-is-vulnerable-to-several-no-confidentiality-exposures-due-to-ibm-sdk-java-technology-edition/
• IBM Security Bulletin 6825125 vom 2022-10-01
  https://www.ibm.com/blogs/psirt/security-bulletin-ibm-mq-is-affected-by-multiple-vulnerabilities-in-ibm-runtime-environment-java-technology-edition-version-8/
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-2R1-release