Skip to content
OpenAdvisories
Low · 3.1 CVE-2021-2341 EUVD-2021-16800GHSA-w2ph-9hg3-84vp

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that …

Published Jul 20, 2021 · Updated Sep 26, 2024 · Assigned by oracle

Description

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Affected products

VendorProductAffectedFixed
Oracle Java SE JDK and JRE Java SE:7u301, Java SE:8u291, Java SE:11.0.11, Java SE:16.0.1, Oracle GraalVM Enterprise Edition:20.3.2, Oracle GraalVM Enterprise Edition:21.1.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 11 openjdk-11 11.0.12+7-1 —
Debian 10 openjdk-11 11.0.12+7-2~deb10u1 DSA-4946-1
Debian 9 openjdk-8 8u302-b08-1~deb9u1 DLA-2737-1
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS openjdk-13 No fix yet —
Ubuntu 20.04 LTS openjdk-8 8u312-b07-0ubuntu1~20.04 USN-5202-1
Ubuntu 20.04 LTS openjdk-lts 11.0.13+8-0ubuntu1~20.04 USN-5202-1
Ubuntu 18.04 LTS openjdk-8 8u312-b07-0ubuntu1~18.04 USN-5202-1
Ubuntu 18.04 LTS openjdk-lts 11.0.13+8-0ubuntu1~18.04 USN-5202-1
Ubuntu 16.04 LTS openjdk-9 No fix yet —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS openjdk-8 8u312-b07-0ubuntu1~16.04 USN-5202-1
ReleasePackageFixed inAdvisory
RHEL 8 java-1.8.0-ibm +7 1:1.8.0.6.35-1.el8_4 RHSA-2021:4089
RHEL 8 java-1.8.0-openjdk +19 1:1.8.0.302.b08-0.el8_4 RHSA-2021:2776
RHEL 8 java-11-openjdk +22 1:11.0.12.0.7-0.el8_4 RHSA-2021:2781
RHEL 7 java-1.7.1-ibm +5 1:1.7.1.4.90-1jpp.1.el7 RHSA-2021:3293
RHEL 7 java-1.8.0-ibm +5 1:1.8.0.6.35-1jpp.1.el7 RHSA-2021:3292
RHEL 7 java-1.8.0-openjdk +7 1:1.8.0.302.b08-0.el7_9 RHSA-2021:2845
RHEL 7 java-11-openjdk +8 1:11.0.12.0.7-0.el7_9 RHSA-2021:2784
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.2 EUS java-1.8.0-openjdk +7 1:1.8.0.302.b08-0.el8_2 RHSA-2021:2774
RHEL 8.2 EUS java-11-openjdk +8 1:11.0.12.0.7-0.el8_2 RHSA-2021:2782
RHEL 8.1 EUS java-1.8.0-openjdk +7 1:1.8.0.302.b08-0.el8_1 RHSA-2021:2775
RHEL 8.1 EUS java-11-openjdk +7 1:11.0.12.0.7-0.el8_1 RHSA-2021:2783

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 java-1.8.0-openjdk-fastdebug +9 1:1.8.0.302.b08-0.el8_4 ALSA-2021:2776
AlmaLinux 8 java-11-openjdk-fastdebug +11 1:11.0.12.0.7-0.el8_4 ALSA-2021:2781

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 java-1.8.0-openjdk 1:1.8.0.302.b08-0.el8_4 RLSA-2021:2776
Rocky Linux 8 java-11-openjdk 1:11.0.12.0.7-0.el8_4 RLSA-2021:2781
ReleasePackageFixed inAdvisory
SLES 15 SP3 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES 15 SP3 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES 15 SP3 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES 15 SP2 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES 15 SP2 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES 15 SP2 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES 15 SP1 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES 15 SP1 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES 15 SP1 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES 15 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES 15 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES 15 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES 12 SP5 java-11-openjdk 11.0.12.0-3.27.2 SUSE-SU-2021:2613-1
SLES 12 SP5 java-1_7_0-openjdk 1.7.0.311-43.50.2 SUSE-SU-2021:3007-1
SLES 12 SP5 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES 12 SP5 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES 12 SP5 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
Show 26 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES 12 SP4 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES 12 SP4 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLES 12 SP3 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES 12 SP3 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES 12 SP3 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLES 12 SP2 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES 12 SP2 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES 12 SP2 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLES 11 SP4 java-1_7_1-ibm 1.7.1_sr5.0-26.68.1 SUSE-SU-2022:14875-1
SLES for SAP 15 SP2 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES for SAP 15 SP1 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES for SAP 15 SP1 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES for SAP 15 SP1 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES for SAP 15 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLES for SAP 15 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SLES for SAP 15 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SLES for SAP 12 SP5 java-11-openjdk 11.0.12.0-3.27.2 SUSE-SU-2021:2613-1
SLES for SAP 12 SP5 java-1_7_0-openjdk 1.7.0.311-43.50.2 SUSE-SU-2021:3007-1
SLES for SAP 12 SP5 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES for SAP 12 SP5 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES for SAP 12 SP5 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLES for SAP 12 SP4 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES for SAP 12 SP4 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES for SAP 12 SP4 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLES for SAP 12 SP3 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SLES for SAP 12 SP3 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SLES for SAP 12 SP3 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SLE HPC 15 SP1 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SLE HPC 15 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SUSE OpenStack Cloud Crowbar 9 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SUSE OpenStack Cloud Crowbar 9 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SUSE OpenStack Cloud Crowbar 9 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SUSE OpenStack Cloud 9 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SUSE OpenStack Cloud 9 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SUSE OpenStack Cloud 9 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SUSE OpenStack Cloud 8 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SUSE OpenStack Cloud 8 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SUSE OpenStack Cloud 8 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SUSE Manager Server 4.1 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SUSE Manager Server 4.0 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SUSE Manager Server 4.0 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SUSE Manager Retail Branch Server 4.1 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SUSE Manager Retail Branch Server 4.0 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SUSE Manager Retail Branch Server 4.0 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SUSE Manager Proxy 4.1 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SUSE Manager Proxy 4.0 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SUSE Manager Proxy 4.0 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
SUSE Linux Enterprise Point of Sale 11 SP3 java-1_7_0-ibm 1.7.0_sr11.0-65.63.1 SUSE-SU-2022:14876-1
SUSE HPE Helion OpenStack 8 java-1_7_1-ibm 1.7.1_sr5.0-38.65.1 SUSE-SU-2022:0166-1
SUSE HPE Helion OpenStack 8 java-1_8_0-ibm 1.8.0_sr7.0-30.84.1 SUSE-SU-2022:0107-1
SUSE HPE Helion OpenStack 8 java-1_8_0-openjdk 1.8.0.302-27.63.2 SUSE-SU-2021:2797-1
SUSE Enterprise Storage 7 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SUSE Enterprise Storage 6 java-11-openjdk 11.0.12.0-3.59.1 SUSE-SU-2021:2952-1
SUSE Enterprise Storage 6 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 SUSE-SU-2022:0108-1
SUSE Enterprise Storage 6 java-1_8_0-openjdk 1.8.0.302-3.55.2 SUSE-SU-2021:2798-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-11-openjdk 11.0.12.0-3.1 openSUSE-SU-2024:10871-1
openSUSE Tumbleweed java-13-openjdk 13.0.8.0-3.1 openSUSE-SU-2024:10872-1
openSUSE Tumbleweed java-15-openjdk 15.0.4.0-2.1 openSUSE-SU-2024:10873-1
openSUSE Tumbleweed java-16-openjdk 16.0.2.0-2.1 openSUSE-SU-2024:10874-1
openSUSE Tumbleweed java-1_8_0-openj9 1.8.0.322-2.1 openSUSE-SU-2024:11896-1
openSUSE Tumbleweed java-1_8_0-openjdk 1.8.0.302-2.2 openSUSE-SU-2024:10876-1
openSUSE Leap 15.3 java-11-openjdk 11.0.12.0-3.59.1 openSUSE-SU-2021:2952-1
openSUSE Leap 15.3 java-1_8_0-ibm 1.8.0_sr7.0-3.53.1 openSUSE-SU-2022:0108-1
openSUSE Leap 15.3 java-1_8_0-openj9 1.8.0.312-3.18.2 openSUSE-SU-2021:3615-1
openSUSE Leap 15.3 java-1_8_0-openjdk 1.8.0.302-3.55.2 openSUSE-SU-2021:2798-1
openSUSE Leap 15.3 seamonkey 2.53.11.1-lp153.17.5.1 openSUSE-SU-2022:0108-1
openSUSE Leap 15.2 java-11-openjdk 11.0.12.0-lp152.2.15.1 openSUSE-SU-2021:1233-1
openSUSE Leap 15.2 java-1_8_0-openj9 1.8.0.312-lp152.3.12.1 openSUSE-SU-2021:1455-1
openSUSE Leap 15.2 java-1_8_0-openjdk 1.8.0.302-lp152.2.15.1 openSUSE-SU-2021:1176-1
ReleasePackageFixed inAdvisory
Alpine v3.24 openjdk11 11.0.12_p7-r0 —
Alpine v3.24 openjdk8 8.302.08-r0 —
Alpine v3.23 openjdk11 11.0.12_p7-r0 —
Alpine v3.23 openjdk8 8.302.08-r0 —
Alpine v3.22 openjdk11 11.0.12_p7-r0 —
Alpine v3.22 openjdk8 8.302.08-r0 —
Alpine v3.21 openjdk11 11.0.12_p7-r0 —
Alpine v3.21 openjdk8 8.302.08-r0 —
Alpine v3.20 openjdk11 11.0.12_p7-r0 —
Alpine v3.20 openjdk8 8.302.08-r0 —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openjdk11 11.0.12_p7-r0 —
Alpine v3.19 openjdk8 8.302.08-r0 —
Alpine v3.18 openjdk11 11.0.12_p7-r0 —
Alpine v3.18 openjdk16 16.0.2_p7-r0 —
Alpine v3.18 openjdk7 7.311.2.6.27-r0 —
Alpine v3.18 openjdk8 8.302.08-r0 —
Alpine v3.17 openjdk11 11.0.12_p7-r0 —
Alpine v3.17 openjdk16 16.0.2_p7-r0 —
Alpine v3.17 openjdk7 7.311.2.6.27-r0 —
Alpine v3.17 openjdk8 8.302.08-r0 —
Alpine v3.16 openjdk11 11.0.12_p7-r0 —
Alpine v3.16 openjdk16 16.0.2_p7-r0 —
Alpine v3.16 openjdk7 7.311.2.6.27-r0 —
Alpine v3.16 openjdk8 8.302.08-r0 —
Alpine v3.15 openjdk11 11.0.12_p7-r0 —
Alpine v3.15 openjdk16 16.0.2_p7-r0 —
Alpine v3.15 openjdk7 7.311.2.6.27-r0 —
Alpine v3.15 openjdk8 8.302.08-r0 —
Alpine v3.14 openjdk11 11.0.12_p7-r0 —
Alpine v3.14 openjdk8 8.302.08-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 java-1.8.0-openjdk +15 1:1.8.0.302.b08-0.amzn2.0.1 ALAS2-2021-1695
Amazon Linux 2 java-11-amazon-corretto +2 1:11.0.12+7-1.amzn2 ALAS2-2021-1692

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 java-1.8.0-openjdk +19 1:1.8.0.302.b08-0.el8_4 ELSA-2021-2776
Oracle Linux 8 java-11-openjdk +22 1:11.0.12.0.7-0.el8_4 ELSA-2021-2781
Oracle Linux 7 java-1.8.0-openjdk +7 1:1.8.0.302.b08-0.el7_9 ELSA-2021-2845
Oracle Linux 7 java-11-openjdk +8 1:11.0.12.0.7-0.0.1.el7_9 ELSA-2021-2784

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling openjdk-10 +3 No fix yet —
Wolfi rolling openjdk-12-jre-base 12.0.2.10-r10 —

Advisories 49

References