Description
** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | openjdk-17 | 17.0.5+8-2ubuntu1~22.04 | — |
| Ubuntu 22.04 LTS | openjdk-18 | No fix yet | — |
| Ubuntu 22.04 LTS | openjdk-8 | 8u392-ga-1~22.04 | USN-6528-1 |
| Ubuntu 22.04 LTS | openjdk-lts | 11.0.17+8-1ubuntu2~22.04 | — |
| Ubuntu 20.04 LTS | openjdk-13 +1 | No fix yet | — |
| Ubuntu 20.04 LTS | openjdk-17 | 17.0.5+8-2ubuntu1~20.04 | — |
| Ubuntu 20.04 LTS | openjdk-8 | 8u392-ga-1~20.04 | USN-6528-1 |
| Ubuntu 20.04 LTS | openjdk-lts | 11.0.17+8-1ubuntu2~20.04 | — |
| Ubuntu 18.04 LTS | openjdk-17 | 17.0.5+8-2ubuntu1~18.04 | — |
| Ubuntu 18.04 LTS | openjdk-lts | 11.0.17+8-1ubuntu2~18.04 | — |
| Ubuntu 16.04 LTS | openjdk-9 | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | openjdk-8 | 8u392-ga-1~18.04 | USN-6528-1 |
| Ubuntu Pro 16.04 LTS | openjdk-8 | 8u392-ga-1~16.04 | USN-6528-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | java-1.8.0-openjdk +16 | 1:1.8.0.392.b08-3.el9 | RHSA-2023:5733 |
| RHEL 8 | java-1.8.0-openjdk +19 | 1:1.8.0.392.b08-4.el8 | RHSA-2023:5731 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.0 EUS | java-1.8.0-openjdk +16 | 1:1.8.0.392.b08-2.el9_0 | RHSA-2023:5732 |
| RHEL 8.6 EUS | java-1.8.0-openjdk +19 | 1:1.8.0.392.b08-2.el8_6 | RHSA-2023:5730 |
| RHEL 8.4 TUS | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_4 | RHSA-2023:5729 |
| RHEL 8.4 E4S | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_4 | RHSA-2023:5729 |
| RHEL 8.4 AUS | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_4 | RHSA-2023:5729 |
| RHEL 8.2 TUS | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_2 | RHSA-2023:5728 |
| RHEL 8.2 E4S | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_2 | RHSA-2023:5728 |
| RHEL 8.2 AUS | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_2 | RHSA-2023:5728 |
| RHEL 8.1 E4S | java-1.8.0-openjdk +7 | 1:1.8.0.392.b08-2.el8_1 | RHSA-2023:5727 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | java-1.8.0-openjdk +16 | 1:1.8.0.392.b08-3.el9 | ALSA-2023:5733 |
| AlmaLinux 8 | java-1.8.0-openjdk +19 | 1:1.8.0.392.b08-4.el8 | ALSA-2023:5731 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | java-1.8.0-amazon-corretto +1 | 1:1.8.0_392.b08-1.amzn2023 | ALAS2023-2023-426 |
| Amazon Linux 2023 | java-11-amazon-corretto +4 | 1:11.0.21+9-1.amzn2023 | ALAS2023-2023-427 |
| Amazon Linux 2 | java-1.8.0-openjdk +15 | 1:1.8.0.382.b05-1.amzn2.0.2 | ALAS2-2023-2278 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | java-1.8.0-openjdk +16 | 1:1.8.0.392.b08-3.0.1.el9 | ELSA-2023-5733 |
| Oracle Linux 8 | java-1.8.0-openjdk +19 | 1:1.8.0.392.b08-4.0.1.el8 | ELSA-2023-5731 |
Advisories 16
- ALSA-2023:5733 Moderate: java-1.8.0-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2023:5731 Moderate: java-1.8.0-openjdk security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2023:5732 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5733 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5730 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5731 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5728 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5729 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2023:5727 Red Hat Security Advisory: java-1.8.0-openjdk security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- USN-6528-1 openjdk-8 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- ALAS2023-2023-426 Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 9, 2023
- ALAS2023-2023-427 Important: java-11-amazon-corretto security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 9, 2023
- WID-SEC-2023-2235 OpenJDK: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 2, 2023
- ELSA-2023-5731 Moderate: java-1.8.0-openjdk security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 2, 2023
- ELSA-2023-5733 Moderate: java-1.8.0-openjdk security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 2, 2023
- ALAS2-2023-2278 Important: java-1.8.0-openjdk security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 5, 2023