java-17-amazon-corretto

Direct Vulnerabilities

Known vulnerabilities in the java-17-amazon-corretto package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.11-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
Comparison Using Wrong Factors

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposure of Data Element to Wrong Session

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Integrity Check Value

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:17.0.21.0.10-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • H
Information Exposure Through Caching

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:17.0.21.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
CRLF Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<1:17.0.21.0.10-1.amzn2023.1
  • H
LDAP Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • M
Server-Side Request Forgery (SSRF)

<1:17.0.20+10-1.amzn2023.1
  • M
Allocation of Resources Without Limits or Throttling

<1:17.0.20+10-1.amzn2023.1
  • M
Improper Cross-boundary Removal of Sensitive Data

<1:17.0.20+10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.20+8-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.20+8-1.amzn2023.1
  • H
Improper Verification of Cryptographic Signature

<1:17.0.20+8-1.amzn2023.1
  • H
NULL Pointer Dereference

<1:17.0.20+8-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.20+8-1.amzn2023.1
  • H
Inefficient Regular Expression Complexity

<1:17.0.20+8-1.amzn2023.1
  • H
Resource Exhaustion

<1:17.0.20+8-1.amzn2023.1
  • H
Resource Exhaustion

<1:17.0.20+8-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.19+10-1.amzn2023.1
  • H
Cleartext Transmission of Sensitive Information

<1:17.0.19+10-1.amzn2023.1
  • H
Uncontrolled Recursion

<1:17.0.19+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:17.0.19+10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:17.0.19+10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.19+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:17.0.19+10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.18+9-1.amzn2023.1
  • H
Improper Validation of Specified Type of Input

<1:17.0.18+9-1.amzn2023.1
  • H
CRLF Injection

<1:17.0.18+9-1.amzn2023.1
  • H
Key Exchange without Entity Authentication

<1:17.0.18+9-1.amzn2023.1
  • M
Inappropriate Encoding for Output Context

<1:17.0.17+10-1.amzn2023.1
  • M
XML External Entity (XXE) Injection

<1:17.0.17+10-1.amzn2023.1
  • H
Information Exposure

<1:17.0.16+8-1.amzn2023.1
  • H
Missing Required Cryptographic Step

<1:17.0.16+8-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.16+8-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.16+8-1.amzn2023.1
  • H
Buffer Overflow

<1:17.0.15+6-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.15+6-1.amzn2023.1
  • H
Information Exposure

<1:17.0.15+6-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:17.0.14+7-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:17.0.13+11-1.amzn2023.1
  • M
Uncontrolled Memory Allocation

<1:17.0.13+11-1.amzn2023.1
  • M
Integer Overflow or Wraparound

<1:17.0.13+11-1.amzn2023.1
  • M
Improper Handling of Length Parameter Inconsistency

<1:17.0.13+11-1.amzn2023.1
  • H
CVE-2024-21147

<1:17.0.12+7-1.amzn2023.1
  • H
CVE-2024-21140

<1:17.0.12+7-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.12+7-1.amzn2023.1
  • H
CVE-2024-21131

<1:17.0.12+7-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.12+7-1.amzn2023.1
  • L
Integer Overflow or Wraparound

<1:17.0.11+9-1.amzn2023.1
  • L
Out-of-bounds Write

<1:17.0.11+9-1.amzn2023.1
  • L
Improper Output Neutralization for Logs

<1:17.0.11+9-1.amzn2023.1
  • L
Reliance on Reverse DNS Resolution for a Security-Critical Action

<1:17.0.11+9-1.amzn2023.1
  • H
CVE-2024-20925

<1:17.0.10+7-1.amzn2023.1
  • H
Covert Timing Channel

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
CVE-2024-20923

<1:17.0.10+7-1.amzn2023.1
  • H
Information Exposure Through Log Files

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
CVE-2024-20922

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.10+7-1.amzn2023.1
  • M
Improper Certificate Validation

<1:17.0.9+8-1.amzn2023.1
  • M
Out-of-Bounds

<1:17.0.9+8-1.amzn2023.1
  • M
Allocation of Resources Without Limits or Throttling

<1:17.0.8+7-1.amzn2023.1
  • M
Directory Traversal

<1:17.0.8+7-1.amzn2023.1
  • M
Directory Traversal

<1:17.0.8+7-1.amzn2023.1
  • M
Out-of-bounds Read

<1:17.0.8+7-1.amzn2023.1
  • M
Out-of-bounds Read

<1:17.0.8+7-1.amzn2023.1
  • M
Small Space of Random Values

<1:17.0.8+7-1.amzn2023.1
  • M
CVE-2023-22043

<1:17.0.8+7-1.amzn2023.1
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.8+7-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.7+7-1.amzn2023.1
  • H
Information Exposure

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Neutralization of Null Byte or NUL Character

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Neutralization of Null Byte or NUL Character

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:17.0.7+7-1.amzn2023.1