java-11-amazon-corretto-headless

Direct Vulnerabilities

Known vulnerabilities in the java-11-amazon-corretto-headless package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Certificate Validation	<1:11.0.32+9-1.amzn2023
H Improper Verification of Cryptographic Signature	<1:11.0.32+9-1.amzn2023
H Inefficient Regular Expression Complexity	<1:11.0.32+9-1.amzn2023
H Out-of-bounds Write	<1:11.0.32+9-1.amzn2023
H Out-of-bounds Write	<1:11.0.32+9-1.amzn2023
H Improper Certificate Validation	<1:11.0.32+9-1.amzn2023
H Resource Exhaustion	<1:11.0.32+9-1.amzn2023
H NULL Pointer Dereference	<1:11.0.32+9-1.amzn2023
H Resource Exhaustion	<1:11.0.32+9-1.amzn2023
H Integer Overflow or Wraparound	<1:11.0.32+9-1.amzn2023
H XML External Entity (XXE) Injection	<1:11.0.31+11-1.amzn2023
H Uncontrolled Recursion	<1:11.0.31+11-1.amzn2023
H Cleartext Transmission of Sensitive Information	<1:11.0.31+11-1.amzn2023
H Use of a Broken or Risky Cryptographic Algorithm	<1:11.0.31+11-1.amzn2023
H Use of a Broken or Risky Cryptographic Algorithm	<1:11.0.31+11-1.amzn2023
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:11.0.31+11-1.amzn2023
H Out-of-bounds Read	<1:11.0.31+11-1.amzn2023
H CRLF Injection	<1:11.0.30+7-1.amzn2023
H Improper Certificate Validation	<1:11.0.30+7-1.amzn2023
H Improper Validation of Specified Type of Input	<1:11.0.30+7-1.amzn2023
H Key Exchange without Entity Authentication	<1:11.0.30+7-1.amzn2023
L CVE-2020-14573	<1:11.0.18+10-1.amzn2023
M Inappropriate Encoding for Output Context	<1:11.0.29+7-1.amzn2023
M CVE-2025-53066	<1:11.0.29+7-1.amzn2023
H Information Exposure	<1:11.0.28+6-1.amzn2023
H CVE-2025-30761	<1:11.0.28+6-1.amzn2023
H Heap-based Buffer Overflow	<1:11.0.28+6-1.amzn2023
H Missing Required Cryptographic Step	<1:11.0.28+6-1.amzn2023
H Heap-based Buffer Overflow	<1:11.0.28+6-1.amzn2023
H Heap-based Buffer Overflow	<1:11.0.27+6-1.amzn2023
H Information Exposure	<1:11.0.27+6-1.amzn2023
H Buffer Overflow	<1:11.0.27+6-1.amzn2023
M Signed to Unsigned Conversion Error	<1:11.0.26+4-1.amzn2023
M Signed to Unsigned Conversion Error	<1:11.0.25+9-1.amzn2023
M Uncontrolled Memory Allocation	<1:11.0.25+9-1.amzn2023
M Integer Overflow or Wraparound	<1:11.0.25+9-1.amzn2023
M Improper Handling of Length Parameter Inconsistency	<1:11.0.25+9-1.amzn2023
H Improper Validation of Specified Quantity in Input	<1:11.0.24+8-1.amzn2023
H Out-of-bounds Write	<1:11.0.24+8-1.amzn2023
H CVE-2024-21147	<1:11.0.24+8-1.amzn2023
H CVE-2024-21131	<1:11.0.24+8-1.amzn2023
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:11.0.24+8-1.amzn2023
H CVE-2024-21140	<1:11.0.24+8-1.amzn2023
L Out-of-bounds Write	<1:11.0.23+9-1.amzn2023
L Improper Output Neutralization for Logs	<1:11.0.23+9-1.amzn2023
L Reliance on Reverse DNS Resolution for a Security-Critical Action	<1:11.0.23+9-1.amzn2023
L Uncontrolled Memory Allocation	<1:11.0.23+9-1.amzn2023
L Integer Overflow or Wraparound	<1:11.0.23+9-1.amzn2023
H CVE-2024-20925	<1:11.0.22+7-1.amzn2023
H Improper Input Validation	<1:11.0.22+7-1.amzn2023
H Information Exposure Through Log Files	<1:11.0.22+7-1.amzn2023
H CVE-2024-20923	<1:11.0.22+7-1.amzn2023
H Covert Timing Channel	<1:11.0.22+7-1.amzn2023
H CVE-2024-20922	<1:11.0.22+7-1.amzn2023
H Out-of-bounds Write	<1:11.0.22+7-1.amzn2023
H Improper Input Validation	<1:11.0.22+7-1.amzn2023
H Improper Input Validation	<1:11.0.22+7-1.amzn2023
H Improper Certificate Validation	<1:11.0.21+9-1.amzn2023
M Improper Certificate Validation	<1:11.0.21+9-1.amzn2023
M Allocation of Resources Without Limits or Throttling	<1:11.0.20+8-1.amzn2023
M Directory Traversal	<1:11.0.20+8-1.amzn2023
M Out-of-bounds Read	<1:11.0.20+8-1.amzn2023
M Small Space of Random Values	<1:11.0.20+8-1.amzn2023
M Directory Traversal	<1:11.0.20+8-1.amzn2023
M CVE-2023-22043	<1:11.0.20+8-1.amzn2023
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1:11.0.20+8-1.amzn2023
H Improper Input Validation	<1:11.0.19+7-1.amzn2023
H Improperly Implemented Security Check for Standard	<1:11.0.19+7-1.amzn2023
H Improper Input Validation	<1:11.0.19+7-1.amzn2023
H Information Exposure	<1:11.0.19+7-1.amzn2023
H Improper Neutralization of Null Byte or NUL Character	<1:11.0.19+7-1.amzn2023
H Improper Neutralization of Null Byte or NUL Character	<1:11.0.19+7-1.amzn2023
H Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1:11.0.19+7-1.amzn2023

Vulnerability

Vulnerable Version

Improper Certificate Validation

<1:11.0.32+9-1.amzn2023