usn-5546-1
Vulnerability from osv_ubuntu
Published
2022-08-04 15:24
Modified
2026-05-29 17:44
Summary
openjdk-8, openjdk-lts, openjdk-17, openjdk-18 vulnerabilities
Details
Neil Madden discovered that OpenJDK did not properly verify ECDSA signatures. A remote attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 17 and OpenJDK 18. (CVE-2022-21449)
It was discovered that OpenJDK incorrectly limited memory when compiling a specially crafted XPath expression. An attacker could possibly use this issue to cause a denial of service. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21426)
It was discovered that OpenJDK incorrectly handled converting certain object arguments into their textual representations. An attacker could possibly use this issue to cause a denial of service. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21434)
It was discovered that OpenJDK incorrectly validated the encoded length of certain object identifiers. An attacker could possibly use this issue to cause a denial of service. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21443)
It was discovered that OpenJDK incorrectly validated certain paths. An attacker could possibly use this issue to bypass the secure validation feature and expose sensitive information in XML files. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21476)
It was discovered that OpenJDK incorrectly parsed certain URI strings. An attacker could possibly use this issue to make applications accept invalid of malformed URI strings. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21496)
It was discovered that OpenJDK incorrectly generated class code in the Hotspot component. An attacker could possibly use this issue to obtain sensitive information. (CVE-2022-21540)
It was dicovered that OpenJDK incorrectly restricted access to the invokeBasic() method in the Hotspot component. An attacker could possibly use this issue to insert, edit or obtain sensitive information. (CVE-2022-21541)
It was discovered that OpenJDK incorrectly computed exponentials. An attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 17. (CVE-2022-21549)
It was discovered that OpenJDK includes a copy of Xalan that incorrectly handled integer truncation. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-34169)
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-17-demo",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-jdk",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-jdk-headless",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-jre",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-jre-headless",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-jre-zero",
"binary_version": "17.0.4+8-1~18.04"
},
{
"binary_name": "openjdk-17-source",
"binary_version": "17.0.4+8-1~18.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "openjdk-17",
"purl": "pkg:deb/ubuntu/openjdk-17@17.0.4+8-1~18.04?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.0.4+8-1~18.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"17+35-1~18.04",
"17.0.1+12-1~18.04",
"17.0.2+8-1~18.04",
"17.0.3+7-0ubuntu0.18.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-8-demo",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-jdk",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-jdk-headless",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-jre",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-jre-headless",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-jre-zero",
"binary_version": "8u342-b07-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-8-source",
"binary_version": "8u342-b07-0ubuntu1~18.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "openjdk-8",
"purl": "pkg:deb/ubuntu/openjdk-8@8u342-b07-0ubuntu1~18.04?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8u342-b07-0ubuntu1~18.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8u144-b01-2",
"8u151-b12-1",
"8u162-b12-1",
"8u171-b11-0ubuntu0.18.04.1",
"8u181-b13-0ubuntu0.18.04.1",
"8u181-b13-1ubuntu0.18.04.1",
"8u191-b12-0ubuntu0.18.04.1",
"8u191-b12-2ubuntu0.18.04.1",
"8u212-b03-0ubuntu1.18.04.1",
"8u222-b10-1ubuntu1~18.04.1",
"8u232-b09-0ubuntu1~18.04.1",
"8u242-b08-0ubuntu3~18.04",
"8u252-b09-1~18.04",
"8u265-b01-0ubuntu2~18.04",
"8u272-b10-0ubuntu1~18.04",
"8u275-b01-0ubuntu1~18.04",
"8u282-b08-0ubuntu1~18.04",
"8u292-b10-0ubuntu1~18.04",
"8u312-b07-0ubuntu1~18.04"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-11-demo",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-jdk",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-jdk-headless",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-jre",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-jre-headless",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-jre-zero",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
},
{
"binary_name": "openjdk-11-source",
"binary_version": "11.0.16+8-0ubuntu1~18.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "openjdk-lts",
"purl": "pkg:deb/ubuntu/openjdk-lts@11.0.16+8-0ubuntu1~18.04?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "11.0.16+8-0ubuntu1~18.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"9.0.4+12-2ubuntu4",
"9.0.4+12-4ubuntu1",
"10~46-4ubuntu1",
"10~46-5ubuntu1",
"10.0.1+10-1ubuntu2",
"10.0.1+10-3ubuntu1",
"10.0.2+13-1ubuntu0.18.04.1",
"10.0.2+13-1ubuntu0.18.04.2",
"10.0.2+13-1ubuntu0.18.04.3",
"10.0.2+13-1ubuntu0.18.04.4",
"11.0.2+9-3ubuntu1~18.04.3",
"11.0.3+7-1ubuntu2~18.04.1",
"11.0.4+11-1ubuntu2~18.04.3",
"11.0.5+10-0ubuntu1.1~18.04",
"11.0.6+10-1ubuntu1~18.04.1",
"11.0.7+10-2ubuntu2~18.04",
"11.0.8+10-0ubuntu1~18.04.1",
"11.0.9+11-0ubuntu1~18.04.1",
"11.0.9.1+1-0ubuntu1~18.04",
"11.0.10+9-0ubuntu1~18.04",
"11.0.11+9-0ubuntu2~18.04",
"11.0.13+8-0ubuntu1~18.04",
"11.0.14+9-0ubuntu2~18.04",
"11.0.14.1+1-0ubuntu1~18.04",
"11.0.15+10-0ubuntu0.18.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-17-demo",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-jdk",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-jdk-headless",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-jre",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-jre-headless",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-jre-zero",
"binary_version": "17.0.4+8-1~20.04"
},
{
"binary_name": "openjdk-17-source",
"binary_version": "17.0.4+8-1~20.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "openjdk-17",
"purl": "pkg:deb/ubuntu/openjdk-17@17.0.4+8-1~20.04?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.0.4+8-1~20.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"17+35-1~20.04",
"17.0.1+12-1~20.04",
"17.0.2+8-1~20.04",
"17.0.3+7-0ubuntu0.20.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-8-demo",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-jdk",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-jdk-headless",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-jre",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-jre-headless",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-jre-zero",
"binary_version": "8u342-b07-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-8-source",
"binary_version": "8u342-b07-0ubuntu1~20.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "openjdk-8",
"purl": "pkg:deb/ubuntu/openjdk-8@8u342-b07-0ubuntu1~20.04?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8u342-b07-0ubuntu1~20.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8u232-b09-0ubuntu1",
"8u232-b09-1",
"8u242-b04-1",
"8u242-b08-0ubuntu3",
"8u252-b07-1",
"8u252-b09-1ubuntu1",
"8u265-b01-0ubuntu2~20.04",
"8u272-b10-0ubuntu1~20.04",
"8u275-b01-0ubuntu1~20.04",
"8u282-b08-0ubuntu1~20.04",
"8u292-b10-0ubuntu1~20.04",
"8u312-b07-0ubuntu1~20.04"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:20.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-11-demo",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-jdk",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-jdk-headless",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-jre",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-jre-headless",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-jre-zero",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
},
{
"binary_name": "openjdk-11-source",
"binary_version": "11.0.16+8-0ubuntu1~20.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "openjdk-lts",
"purl": "pkg:deb/ubuntu/openjdk-lts@11.0.16+8-0ubuntu1~20.04?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "11.0.16+8-0ubuntu1~20.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"11.0.5+10-0ubuntu1",
"11.0.5+10-2ubuntu1",
"11.0.6+10-1ubuntu1",
"11.0.6+10-2ubuntu2",
"11.0.7+9-1ubuntu1",
"11.0.7+10-2ubuntu1",
"11.0.7+10-3ubuntu1",
"11.0.8+10-0ubuntu1~20.04",
"11.0.9+11-0ubuntu1~20.04",
"11.0.9.1+1-0ubuntu1~20.04",
"11.0.10+9-0ubuntu1~20.04",
"11.0.11+9-0ubuntu2~20.04",
"11.0.13+8-0ubuntu1~20.04",
"11.0.14+9-0ubuntu2~20.04",
"11.0.14.1+1-0ubuntu1~20.04",
"11.0.15+10-0ubuntu0.20.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21449",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-17-demo",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-jdk",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-jdk-headless",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-jre",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-jre-headless",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-jre-zero",
"binary_version": "17.0.4+8-1~22.04"
},
{
"binary_name": "openjdk-17-source",
"binary_version": "17.0.4+8-1~22.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "openjdk-17",
"purl": "pkg:deb/ubuntu/openjdk-17@17.0.4+8-1~22.04?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.0.4+8-1~22.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"17+35-1",
"17.0.1+12-1",
"17.0.2+8-1",
"17.0.3+7-0ubuntu0.22.04.1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21449",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-18-demo",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-jdk",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-jdk-headless",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-jre",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-jre-headless",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-jre-zero",
"binary_version": "18.0.2+9-2~22.04"
},
{
"binary_name": "openjdk-18-source",
"binary_version": "18.0.2+9-2~22.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "openjdk-18",
"purl": "pkg:deb/ubuntu/openjdk-18@18.0.2+9-2~22.04?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "18.0.2+9-2~22.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"18~15ea-4",
"18~20ea-1",
"18~32ea-1",
"18~36ea-1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21449",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-8-demo",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-jdk",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-jdk-headless",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-jre",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-jre-headless",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-jre-zero",
"binary_version": "8u342-b07-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-8-source",
"binary_version": "8u342-b07-0ubuntu1~22.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "openjdk-8",
"purl": "pkg:deb/ubuntu/openjdk-8@8u342-b07-0ubuntu1~22.04?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8u342-b07-0ubuntu1~22.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8u302-b08-0ubuntu2",
"8u312-b07-0ubuntu1"
]
},
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2022-21426",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21434",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21443",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21449",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21476",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21496",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21540",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21541",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-21549",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2022-34169",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "openjdk-11-demo",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-jdk",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-jdk-headless",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-jre",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-jre-headless",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-jre-zero",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
},
{
"binary_name": "openjdk-11-source",
"binary_version": "11.0.16+8-0ubuntu1~22.04"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "openjdk-lts",
"purl": "pkg:deb/ubuntu/openjdk-lts@11.0.16+8-0ubuntu1~22.04?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "11.0.16+8-0ubuntu1~22.04"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"11.0.12+7-0ubuntu3",
"11.0.13+8-0ubuntu1",
"11.0.14+9-0ubuntu2",
"11.0.14.1+1-0ubuntu1",
"11.0.15+10-0ubuntu0.22.04.1"
]
}
],
"aliases": [],
"details": "Neil Madden discovered that OpenJDK did not properly verify ECDSA\nsignatures. A remote attacker could possibly use this issue to insert,\nedit or obtain sensitive information. This issue only affected OpenJDK\n17 and OpenJDK 18. (CVE-2022-21449)\n\nIt was discovered that OpenJDK incorrectly limited memory when compiling a\nspecially crafted XPath expression. An attacker could possibly use this\nissue to cause a denial of service. This issue was fixed in OpenJDK 8 and\nOpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11\nand OpenJDK 17. (CVE-2022-21426)\n\nIt was discovered that OpenJDK incorrectly handled converting certain\nobject arguments into their textual representations. An attacker could\npossibly use this issue to cause a denial of service. This issue was\nfixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed\nthis issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21434)\n\nIt was discovered that OpenJDK incorrectly validated the encoded length of\ncertain object identifiers. An attacker could possibly use this issue to\ncause a denial of service. This issue was fixed in OpenJDK 8 and OpenJDK 18.\nUSN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17.\n(CVE-2022-21443)\n\nIt was discovered that OpenJDK incorrectly validated certain paths. An\nattacker could possibly use this issue to bypass the secure validation\nfeature and expose sensitive information in XML files. This issue was\nfixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this\nissue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21476)\n\nIt was discovered that OpenJDK incorrectly parsed certain URI strings. An\nattacker could possibly use this issue to make applications accept\ninvalid of malformed URI strings. This issue was fixed in OpenJDK 8 and\nOpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11\nand OpenJDK 17. (CVE-2022-21496)\n\nIt was discovered that OpenJDK incorrectly generated class code in the\nHotspot component. An attacker could possibly use this issue to obtain\nsensitive information. (CVE-2022-21540)\n\nIt was dicovered that OpenJDK incorrectly restricted access to the\ninvokeBasic() method in the Hotspot component. An attacker could possibly\nuse this issue to insert, edit or obtain sensitive information.\n(CVE-2022-21541)\n\nIt was discovered that OpenJDK incorrectly computed exponentials. An\nattacker could possibly use this issue to insert, edit or obtain sensitive\ninformation. This issue only affected OpenJDK 17.\n(CVE-2022-21549)\n\nIt was discovered that OpenJDK includes a copy of Xalan that incorrectly\nhandled integer truncation. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2022-34169)\n",
"id": "USN-5546-1",
"modified": "2026-05-29T17:44:06Z",
"published": "2022-08-04T15:24:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-5546-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21426"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21434"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21443"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21449"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21476"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21496"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21540"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21541"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-21549"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-34169"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "openjdk-8, openjdk-lts, openjdk-17, openjdk-18 vulnerabilities",
"upstream": [
"UBUNTU-CVE-2022-21426",
"UBUNTU-CVE-2022-21434",
"UBUNTU-CVE-2022-21443",
"UBUNTU-CVE-2022-21449",
"UBUNTU-CVE-2022-21476",
"UBUNTU-CVE-2022-21496",
"UBUNTU-CVE-2022-21540",
"UBUNTU-CVE-2022-21541",
"UBUNTU-CVE-2022-21549",
"UBUNTU-CVE-2022-34169"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…