Medium WID-SEC-2023-1814 6 CVEs

Amazon Corretto: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Jul 18, 2023 · Updated Jul 18, 2023 · de-DE

Vendor: amazon Product: Corretto Product: Corretto < 11.0.20.8.1 Product: Corretto < 8.382.05.1

Summary

Ein Angreifer kann mehrere Schwachstellen in Amazon Corretto ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Amazon Corretto ist eine Distribution des Open Java Development Kit (OpenJDK).

Vulnerabilities 6

High 7.5

CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2023
Medium 5.1

CVE-2023-22041

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jul 18, 2023
Low 3.7

CVE-2023-22036

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jul 18, 2023
Low 3.7

CVE-2023-22045

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 18, 2023
Low 3.7

CVE-2023-22049

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 18, 2023
Low 3.1

CVE-2023-22006

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jul 18, 2023

Revision history

2023-07-18 #1
Initiale Fassung

References

Github Advisory Database vom 2023-07-18
https://github.com/corretto/corretto-8/blob/release-8.382.05.1/CHANGELOG.md
Github Advisory Database vom 2023-07-18
https://github.com/corretto/corretto-11/blob/release-11.0.20.8.1/CHANGELOG.md