Showing 1 - 25 of 33

CVE-2023-21968

Status Candidate

Overview

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Related Files

Debian Security Advisory 5478-1: Posted Aug 17, 2023; Authored by Debian | Site debian.org; Debian Linux Security Advisory 5478-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions, information disclosure, reduced cryptographic strength of the AES implementation, directory traversal or denial of service.; tags | advisory, java, denial of service, vulnerability, info disclosure; systems | linux, debian; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968, CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22045, CVE-2023-22049; SHA-256 | 1abbda9face35cc55de373d200a91797c0b8a6083da1289cd62ef92eff8eca01; Download | Favorite | View

Red Hat Security Advisory 2023-4160-01: Posted Jul 31, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-4160-01 - IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR8-FP5.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21967, CVE-2023-21968; SHA-256 | 2df6e21cc6cbfbf3c66504bd9b965d140af6844f9ac44006968adb7c013f8bcb; Download | Favorite | View

Red Hat Security Advisory 2023-4103-01: Posted Jul 18, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-4103-01 - IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR8-FP5.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21967, CVE-2023-21968; SHA-256 | bcd885781e971c74de00a58d2acc42a6ad6a8692ab15e28ae801682a3e6c5ebd; Download | Favorite | View

Debian Security Advisory 5430-1: Posted Jun 16, 2023; Authored by Debian | Site debian.org; Debian Linux Security Advisory 5430-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, information disclosure or bypass of sandbox restrictions.; tags | advisory, java, denial of service, vulnerability, info disclosure; systems | linux, debian; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | a4ece4420f8b96970d286b1d8fdd46ce7c0bbe2000da066ceb03829110b5bb0d; Download | Favorite | View

Red Hat Security Advisory 2023-3373-02: Posted Jun 5, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-3373-02 - Migration Toolkit for Runtimes 1.1.0 Images. Issues addressed include a denial of service vulnerability.; tags | advisory, denial of service; systems | linux, redhat; advisories | CVE-2021-46877, CVE-2022-36227, CVE-2022-41854, CVE-2022-41881, CVE-2023-0361, CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968, CVE-2023-27535, CVE-2023-28617; SHA-256 | 7678ca0b7bd958e85ffc13d8fdb5d08a983bdc9c706896d0141a71287a108a11; Download | Favorite | View

Ubuntu Security Notice USN-6077-1: Posted May 16, 2023; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 6077-1 - Ben Smyth discovered that OpenJDK incorrectly handled half-duplex connections during TLS handshake. A remote attacker could possibly use this issue to insert, edit or obtain sensitive information. It was discovered that OpenJDK incorrectly handled certain inputs. An attacker could possibly use this issue to insert, edit or obtain sensitive information.; tags | advisory, remote; systems | linux, ubuntu; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | e55b8ae2444473529159e92a21b7de23ff79ac167ebabd54e20dcb07f03f0efc; Download | Favorite | View

Red Hat Security Advisory 2023-1884-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1884-01 - The OpenJDK 17 packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. This release of the Red Hat build of OpenJDK 17 for portable Linux serves as a replacement for the Red Hat build of OpenJDK 17 and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | fc9c89b13e312fb5f4fe1200009a9ca763b5f8337fc63c661b1d4617cab984b4; Download | Favorite | View

Red Hat Security Advisory 2023-1911-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1911-01 - The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 9d163bafbf388ac00da9f7a838418d56d00c0139edb7bf0140f06b01dec25a06; Download | Favorite | View

Red Hat Security Advisory 2023-1891-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1891-01 - The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | a02f2aeb02de3e3cd1ef5581ab62cd830ff7765877fb325a12d70845a136334a; Download | Favorite | View

Red Hat Security Advisory 2023-1900-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1900-01 - The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 743fb31e69fd4e0116700449a26a483ff2f843f48be9bae0069191715d14ef4d; Download | Favorite | View

Red Hat Security Advisory 2023-1909-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1909-01 - The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 3739b37c880d2da2be9d06afde260f6c5c51745b5d9fbe5add364093b8a5cfd1; Download | Favorite | View

Red Hat Security Advisory 2023-1895-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1895-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 7e24dc5c83755b35eac96990fec408a3982ade0da1cf5f6def9808b724814582; Download | Favorite | View

Red Hat Security Advisory 2023-1898-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1898-01 - The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | c3885a76526f2066fe315bfaba0bbeed59359de09379a9db4645147aa664059c; Download | Favorite | View

Red Hat Security Advisory 2023-1892-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1892-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | d0fee704ac2e0b904f5b6f7700c6e81698b85814ff5f9575c5fcaec580afd3f5; Download | Favorite | View

Red Hat Security Advisory 2023-1890-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1890-01 - The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 475f33b3702899a4789e289b74fb8f0babce8e19a61863ced44976a76bbb2989; Download | Favorite | View

Red Hat Security Advisory 2023-1889-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1889-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 9f78081af1d5884adcd5cbc581deafc1e86b022e83fb9cd4c0f6e9aa196fef43; Download | Favorite | View

Red Hat Security Advisory 2023-1885-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1885-01 - The OpenJDK 17 packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. This release of the Red Hat build of OpenJDK 17 for Windows serves as a replacement for the Red Hat build of OpenJDK 17 and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.; tags | advisory, java; systems | linux, redhat, windows; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 6b538a7d71968b40e6dcb6cbd5c0dd3f4805a47610bce183ef11991b7b066e1d; Download | Favorite | View

Red Hat Security Advisory 2023-1883-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1883-01 - The OpenJDK 11 packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 89086efafad7b47c649ece9e706d98f4bb86800cbff99611eaa3c6515cf3b306; Download | Favorite | View

Red Hat Security Advisory 2023-1882-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1882-01 - The OpenJDK 11 packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This release of the Red Hat build of OpenJDK 11 for portable Linux serves as a replacement for the Red Hat build of OpenJDK 11 and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | ae6ae382fe236c3ee3d121bf93bb59603a6556e13239b282a97b58f348ce2db9; Download | Favorite | View

Red Hat Security Advisory 2023-1878-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1878-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 8a99bdecb8ab95d5487d191c368d387fd8b7d81949cc728015354c3737ec821f; Download | Favorite | View

Red Hat Security Advisory 2023-1880-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1880-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 6bee210bfe6ca381dea2dfb8ab1116b9b1a3d56f91634b1bdffa4de2427dc325; Download | Favorite | View

Red Hat Security Advisory 2023-1875-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1875-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | f110ce1f7d7d83af469aa59bd8d179ecb5ab2e0dd8e7e81dc3ee2cc224265d2d; Download | Favorite | View

Red Hat Security Advisory 2023-1877-01: Posted Apr 26, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1877-01 - The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 2a48327fda372aa20f57268a2edca68596729f33b44fe139da1e53f2f641e4ce; Download | Favorite | View

Red Hat Security Advisory 2023-1910-01: Posted Apr 25, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1910-01 - The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 74130d190c61aa80112d089f35b19a30b612eb672fe64eaa481a1edc19c3bbd3; Download | Favorite | View

Red Hat Security Advisory 2023-1903-01: Posted Apr 25, 2023; Authored by Red Hat | Site access.redhat.com; Red Hat Security Advisory 2023-1903-01 - The OpenJDK 8 packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. This release of the Red Hat build of OpenJDK 8 for portable Linux serves as a replacement for Red Hat build of OpenJDK 8 and includes security and bug fixes as well as enhancements. For further information, refer to the release notes linked to in the References section.; tags | advisory, java; systems | linux, redhat; advisories | CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968; SHA-256 | 88cd7002307ada1b1fbc99d2e1a65e6c888c2b4bffb0411a03730c7ae212fe7f; Download | Favorite | View

Page 1 of 2 Back 1 2 Next

Top Authors In Last 30 Days

Red Hat 242 files
Ubuntu 52 files
Debian 22 files
LiquidWorm 15 files
Apple 9 files
Gentoo 8 files
Google Security Research 3 files
Alter Prime 3 files
Pierre Kim 2 files
Jann Horn 2 files

File Archives

Systems

AIX (430)
Apple (2,126)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,166)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,607)
HPUX (881)
iOS (393)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,960)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,344)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,989)
UNIX (9,475)
UnixWare (188)
Windows (6,784)
Other

CVE-2023-21968

Overview

Related Files

File Archive:

November 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems