Medium WID-SEC-2022-0812 11 CVEs

IBM Java: Mehrere Schwachstellen ermöglichen Denial of Service

Published Feb 22, 2022 · Updated Jan 1, 2023 · Revision 8 · de-DE

Vendor: HCL Software Vendor: IBM Product: Commerce Product: Java Product: Java < 7.0.11.5 Product: Java < 7.1.5.5 Product: Java < 8.0.7.5 Product: QRadar SIEM Product: QRadar SIEM 7.4 Product: QRadar SIEM 7.5 Product: Rational Business Developer Product: Rational Business Developer 9.1 Product: Rational Business Developer 9.5 Product: Rational Business Developer 9.6 Product: Rational Business Developer 9.7 Product: Rational Directory Server (RDS) 5.2.1 Product: Security Guardium Product: Security Guardium 10.6 Product: Security Guardium 11.0 Product: Security Guardium 11.1 Product: Security Guardium 11.2 Product: Security Guardium 11.4 Product: Tivoli Monitoring Product: Tivoli Netcool/OMNIbus 8.1.0 Product: WebSphere Application Server Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Java ausnutzen, um einen Denial of Service Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.

Product

IBM Java Runtime ist die Java Runtime Environment (kurz JRE) Portierung von IBM.

Vulnerabilities 11

Medium 5.3

CVE-2022-21291

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21293

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21294

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21299

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21305

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21340 Public exploit

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21341

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Suppo…

Oracle Java SE JDK and JRE openjdk-8 openjdk8 Ubuntu Alpine

Jan 19, 2022
Medium 5.3

CVE-2022-21360

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21365

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Low 3.7

CVE-2022-21248

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022

Revision history

2023-01-01 #8
Neue Updates von IBM aufgenommen
2022-12-20 #7
Neue Updates von IBM aufgenommen
2022-10-19 #6
Neue Updates von IBM aufgenommen
2022-10-11 #5
Neue Updates von IBM aufgenommen
2022-10-04 #4
Neue Updates von IBM aufgenommen
2022-10-03 #3
Neue Updates von IBM aufgenommen
2022-07-24 #2
Neue Updates von HCL aufgenommen
2022-02-22 #1
Initiale Fassung

References

IBM Security Bulletin 6852241 vom 2022-12-30
https://www.ibm.com/support/pages/node/6852241
IBM Security Bulletin 6848847 vom 2022-12-21
https://www.ibm.com/support/pages/node/6848847
IBM Security Bulletin: 6558558 vom 2022-02-22
https://www.ibm.com/support/pages/node/6558558
HCL Article KB0099131 vom 2022-07-24
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099131
IBM Security Bulletin 6618045 vom 2022-10-01
https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-ibm-java-included-with-ibm-tivoli-monitoring-4/
IBM Security Bulletin 6826699 vom 2022-10-05
https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-ibm-java-sdk-and-ibm-java-runtime-affects-ibm-qradar-siem-2/
IBM Security Bulletin 6826665 vom 2022-10-05
https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-ibm-java-sdk-and-ibm-java-runtime-affects-rational-business-developer-10/
IBM Security Bulletin 6828555 vom 2022-10-12
https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affect-ibm-security-guardium-26/
IBM Security Bulletin 6830499 vom 2022-10-20
https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-sdk-affects-ibm-websphere-application-server-april-2022-cpu-that-is-bundled-with-ibm-websphere-application-server-patterns/