Skip to content
OpenAdvisories

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected products

VendorProductAffectedFixed
Oracle Java SE JDK and JRE Oracle Java SE:11.0.17, Oracle Java SE:17.0.5, Oracle Java SE:19.0.1, Oracle GraalVM Enterprise Edition:20.3.8, Oracle GraalVM Enterprise Edition:21.3.4, Oracle GraalVM Enterprise Edition:22.3.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 openjdk-21 21~7ea-1 —
Debian 13 openjdk-21 21~7ea-1 —
Debian 12 openjdk-17 17.0.6+10-1 —
Debian 11 openjdk-11 11.0.18+10-1~deb11u1 DSA-5331-1
Debian 11 openjdk-17 17.0.6+10-1~deb11u1 DSA-5335-1
Debian 10 openjdk-11 11.0.18+10-1~deb10u1 DLA-3307-1
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS openjdk-17 17.0.6+10-0ubuntu1~22.04 USN-5897-1
Ubuntu 22.04 LTS openjdk-18 No fix yet —
Ubuntu 22.04 LTS openjdk-19 19.0.2+7-0ubuntu3~22.04 USN-5897-1
Ubuntu 22.04 LTS openjdk-lts 11.0.18+10-0ubuntu1~22.04 USN-5897-1
Ubuntu 20.04 LTS openjdk-13 +1 No fix yet —
Ubuntu 20.04 LTS openjdk-17 17.0.6+10-0ubuntu1~20.04.1 USN-5897-1
Ubuntu 20.04 LTS openjdk-lts 11.0.18+10-0ubuntu1~20.04.1 USN-5897-1
Ubuntu 18.04 LTS openjdk-17 17.0.6+10-0ubuntu1~18.04.1 USN-5897-1
Ubuntu 18.04 LTS openjdk-lts 11.0.18+10-0ubuntu1~18.04.1 USN-5897-1
Ubuntu 16.04 LTS openjdk-9 No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 java-11-openjdk +22 1:11.0.18.0.10-2.el9_1 RHSA-2023:0202
RHEL 9 java-17-openjdk +22 1:17.0.6.0.10-3.el9_1 RHSA-2023:0194
RHEL 8 java-11-openjdk +22 1:11.0.18.0.10-2.el8_7 RHSA-2023:0200
RHEL 8 java-17-openjdk +22 1:17.0.6.0.10-3.el8_7 RHSA-2023:0192
RHEL 7 java-11-openjdk +8 1:11.0.18.0.10-1.el7_9 RHSA-2023:0195
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.0 EUS java-11-openjdk +22 1:11.0.18.0.10-1.el9_0 RHSA-2023:0201
RHEL 9.0 EUS java-17-openjdk +22 1:17.0.6.0.10-2.el9_0 RHSA-2023:0193
RHEL 8.6 EUS java-11-openjdk +22 1:11.0.18.0.10-1.el8_6 RHSA-2023:0199
RHEL 8.6 EUS java-17-openjdk +22 1:17.0.6.0.10-2.el8_6 RHSA-2023:0190
RHEL 8.4 EUS java-11-openjdk +22 1:11.0.18.0.10-1.el8_4 RHSA-2023:0198
RHEL 8.4 EUS java-17-openjdk +22 1:17.0.6.0.10-2.el8_4 RHSA-2023:0191
RHEL 8.2 TUS java-11-openjdk +8 1:11.0.18.0.10-1.el8_2 RHSA-2023:0197
RHEL 8.2 E4S java-11-openjdk +8 1:11.0.18.0.10-1.el8_2 RHSA-2023:0197
RHEL 8.2 AUS java-11-openjdk +8 1:11.0.18.0.10-1.el8_2 RHSA-2023:0197
RHEL 8.1 E4S java-11-openjdk +7 1:11.0.18.0.10-1.el8_1 RHSA-2023:0196

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 java-11-openjdk +22 1:11.0.18.0.10-2.el9_1 ALSA-2023:0202
AlmaLinux 9 java-17-openjdk +22 1:17.0.6.0.10-3.el9_1 ALSA-2023:0194
AlmaLinux 8 java-11-openjdk +22 1:11.0.18.0.10-2.el8_7 ALSA-2023:0200
AlmaLinux 8 java-17-openjdk +22 1:17.0.6.0.10-3.el8_7 ALSA-2023:0192

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 java-11-openjdk 1:11.0.18.0.10-2.el9_1 RLSA-2023:0202
Rocky Linux 9 java-17-openjdk 1:17.0.6.0.10-3.el9_1 RLSA-2023:0194
Rocky Linux 8 java-11-openjdk 1:11.0.18.0.10-2.el8_7 RLSA-2023:0200
Rocky Linux 8 java-17-openjdk 1:17.0.6.0.10-3.el8_7 RLSA-2023:0192
ReleasePackageFixed inAdvisory
SLES 15 SP4 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES 15 SP4 java-17-openjdk 17.0.6.0-150400.3.12.1 SUSE-SU-2023:0435-1
SLES 15 SP4 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES 15 SP3 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES 15 SP3 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES 15 SP2 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES 15 SP2 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES 15 SP1 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES 15 SP1 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES 12 SP5 java-11-openjdk 11.0.18.0-3.52.1 SUSE-SU-2023:0436-1
SLES 12 SP5 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SLES 12 SP2 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SLES for SAP 15 SP3 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES for SAP 15 SP3 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES for SAP 15 SP2 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES for SAP 15 SP2 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES for SAP 15 SP1 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLES for SAP 15 SP1 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLES for SAP 12 SP5 java-11-openjdk 11.0.18.0-3.52.1 SUSE-SU-2023:0436-1
SLES for SAP 12 SP5 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SLES for SAP 12 SP4 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SLE Real Time 15 SP3 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLE HPC 15 SP3 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLE HPC 15 SP3 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SLE HPC 15 SP2 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SLE HPC 15 SP1 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SUSE Package Hub 15 SP6 java-11-openj9 11.0.26.0-bp156.4.3.1 openSUSE-SU-2025:0066-1
SUSE Package Hub 15 SP6 java-17-openj9 17.0.14.0-bp156.3.3.1 openSUSE-SU-2025:0067-1
SUSE OpenStack Cloud Crowbar 9 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SUSE OpenStack Cloud 9 java-1_8_0-ibm 1.8.0_sr8.0-30.105.1 SUSE-SU-2023:1823-1
SUSE Manager Server 4.2 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SUSE Manager Proxy 4.2 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SUSE Enterprise Storage 7.1 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SUSE Enterprise Storage 7.1 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
SUSE Enterprise Storage 7 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
SUSE Enterprise Storage 7 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed java-11-openj9 +1 11.0.18.0-1.1 openSUSE-SU-2024:12754-1, openSUSE-SU-2024:12663-1
openSUSE Tumbleweed java-13-openjdk 13.0.14.0-1.1 openSUSE-SU-2024:12719-1
openSUSE Tumbleweed java-15-openjdk 15.0.10.0-1.1 openSUSE-SU-2024:12720-1
openSUSE Tumbleweed java-17-openj9 +1 17.0.6.0-1.1 openSUSE-SU-2024:12755-1, openSUSE-SU-2024:12669-1
openSUSE Tumbleweed java-19-openjdk 19.0.2.0-1.1 openSUSE-SU-2024:12661-1
openSUSE Leap 15.6 java-11-openj9 11.0.26.0-bp156.4.3.1 openSUSE-SU-2025:0066-1
openSUSE Leap 15.6 java-17-openj9 17.0.14.0-bp156.3.3.1 openSUSE-SU-2025:0067-1
openSUSE Leap 15.4 java-11-openjdk 11.0.18.0-150000.3.93.1 SUSE-SU-2023:0752-1
openSUSE Leap 15.4 java-17-openjdk 17.0.6.0-150400.3.12.1 SUSE-SU-2023:0435-1
openSUSE Leap 15.4 java-1_8_0-ibm 1.8.0_sr8.0-150000.3.71.1 SUSE-SU-2023:1850-1
ReleasePackageFixed inAdvisory
Alpine v3.24 openjdk11 11.0.18_p10-r0 —
Alpine v3.24 openjdk17 17.0.6_p10-r0 —
Alpine v3.23 openjdk11 11.0.18_p10-r0 —
Alpine v3.23 openjdk17 17.0.6_p10-r0 —
Alpine v3.22 openjdk11 11.0.18_p10-r0 —
Alpine v3.22 openjdk17 17.0.6_p10-r0 —
Alpine v3.21 openjdk11 11.0.18_p10-r0 —
Alpine v3.21 openjdk17 17.0.6_p10-r0 —
Alpine v3.20 openjdk11 11.0.18_p10-r0 —
Alpine v3.20 openjdk17 17.0.6_p10-r0 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openjdk11 11.0.18_p10-r0 —
Alpine v3.19 openjdk17 17.0.6_p10-r0 —
Alpine v3.19 openjdk19 19.0.2_p7-r0 —
Alpine v3.18 openjdk11 11.0.18_p10-r0 —
Alpine v3.18 openjdk17 17.0.6_p10-r0 —
Alpine v3.17 openjdk11 11.0.18_p10-r0 —
Alpine v3.17 openjdk17 17.0.6_p10-r0 —
Alpine v3.16 openjdk11 11.0.18_p10-r0 —
Alpine v3.16 openjdk17 17.0.6_p10-r0 —
Alpine v3.15 openjdk11 11.0.18_p10-r0 —
Alpine v3.15 openjdk17 17.0.6_p10-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 java-11-amazon-corretto +2 1:11.0.18+10-1.amzn2 ALAS2-2023-1918
Amazon Linux 2 java-17-amazon-corretto +4 1:17.0.6+10-1.amzn2.1 ALAS2-2023-1919

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 graalvm22-ce-11 +41 22.3.1-1.el9 ELSA-2023-12077, ELSA-2023-12076, ELSA-2023-12075
Oracle Linux 9 java-11-openjdk +22 1:11.0.18.0.10-2.0.1.el9_1 ELSA-2023-0202
Oracle Linux 9 java-17-openjdk +22 1:17.0.6.0.10-3.0.1.el9_1 ELSA-2023-0194
Oracle Linux 8 graalvm22-ce-11 +41 22.3.1-1.el8 ELSA-2023-12073, ELSA-2023-12072, ELSA-2023-12071
Oracle Linux 8 java-11-openjdk +22 1:11.0.18.0.10-2.el8_7 ELSA-2023-0200
Oracle Linux 8 java-17-openjdk +22 1:17.0.6.0.10-3.el8_7 ELSA-2023-0192
Oracle Linux 7 graalvm22-ce-11 +41 22.3.1-1.el7 ELSA-2023-12069, ELSA-2023-12068, ELSA-2023-12067
Oracle Linux 7 java-11-openjdk +8 1:11.0.18.0.10-1.el7_9 ELSA-2023-0195

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling openjdk-10 No fix yet —
Wolfi rolling openjdk-12 +2 12.0.2.10-r5 —
Wolfi rolling openjdk-13 13.0.14.5-r4 —
Wolfi rolling openjdk-15 15.0.10.5-r7 —
Wolfi rolling openjdk-16 16.0.2.7-r7 —
Wolfi rolling openjdk-18 +2 18.0.2.1.0-r6 —
Wolfi rolling openjdk-19 +2 19.0.2.7-r6 —
Wolfi rolling openjdk-9 9.0.4-r5 —

Advisories 50

References