5.3
CVSSv3

CVE-2022-21549

Published: 19/07/2022 Updated: 17/01/2024
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

It exists that OpenJDK incorrectly handled converting certain object arguments into their textual representations. An attacker could possibly use this issue to cause a denial of service. This issue was fixed in OpenJDK 8 and OpenJDK 18. USN-5388-1 and USN-5388-2 addressed this issue in OpenJDK 11 and OpenJDK 17. (CVE-2022-21434)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oracle jre 17.0.3.1

oracle jdk 17.0.3.1

oracle graalvm 21.3.2

oracle graalvm 22.1.0

azul zulu 17.34

fedoraproject fedora 35

fedoraproject fedora 36

debian debian linux 11.0

netapp oncommand insight -

netapp solidfire -

netapp hci management node -

netapp active iq unified manager -

netapp hci compute node -

netapp 7-mode transition tool -

netapp cloud insights acquisition unit -

netapp cloud secure agent -

Vendor Advisories

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in the execution of arbitrary Java bytecode or the bypass of the Java sandbox For the stable distribution (bullseye), this problem has been fixed in version 1704+8-1~deb11u1 We recommend that you upgrade your openjdk-17 packages For the detailed security ...
Synopsis Important: java-17-openjdk security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9Red Hat Product S ...
概述 Important: OpenJDK 1704 security update for Windows Builds 类型/严重性 Security Advisory: Important 标题 The Red Hat build of OpenJDK 17 (java-17-openjdk) is now available for WindowsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score ...
概述 Important: java-17-openjdk security, bug fix, and enhancement update 类型/严重性 Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems 标题 An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Product ...
概述 Important: OpenJDK 1704 Security Update for Portable Linux Builds 类型/严重性 Security Advisory: Important 标题 The Red Hat build of OpenJDK 17 (java-17-openjdk) is now available for portable LinuxRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...
Synopsis Important: Release of OpenShift Serverless 1240 Type/Severity Security Advisory: Important Topic Release of OpenShift Serverless 1240The References section contains CVE links providing detailed severity ratingsfor each vulnerability Ratings are based on a Common Vulnerability ScoringSystem (CVSS) base score Description Versio ...
Several security issues were fixed in OpenJDK 8 ...
Several security issues were fixed in OpenJDK ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540) MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541) computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549) The Xalan Java X ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540) MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541) computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549) The Xalan Java X ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540) MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541) computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549) The Xalan Java X ...