java-17-amazon-corretto-jmods

Direct Vulnerabilities

Known vulnerabilities in the java-17-amazon-corretto-jmods package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.11-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:17.0.21.0.10-1.amzn2023.1
  • H
LDAP Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Compiler Optimization Removal or Modification of Security-critical Code

<1:17.0.21.0.10-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Integrity Check Value

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Validation of Syntactic Correctness of Input

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposure of Data Element to Wrong Session

<1:17.0.21.0.10-1.amzn2023.1
  • H
CRLF Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:17.0.21.0.10-1.amzn2023.1
  • H
Incorrect Implementation of Authentication Algorithm

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

<1:17.0.21.0.10-1.amzn2023.1
  • H
Comparison Using Wrong Factors

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Allocation of Resources Without Limits or Throttling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Information Exposure Through Caching

<1:17.0.21.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:17.0.21.0.10-1.amzn2023.1
  • H
HTTP Request Smuggling

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.21.0.10-1.amzn2023.1
  • H
Insufficient Compartmentalization

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Exposed Dangerous Method or Function

<1:17.0.21.0.10-1.amzn2023.1
  • H
XML Injection

<1:17.0.21.0.10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.21.0.10-1.amzn2023.1
  • H
Directory Traversal

<1:17.0.21.0.10-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.21.0.10-1.amzn2023.1
  • M
Allocation of Resources Without Limits or Throttling

<1:17.0.20+10-1.amzn2023.1
  • M
Improper Cross-boundary Removal of Sensitive Data

<1:17.0.20+10-1.amzn2023.1
  • M
Server-Side Request Forgery (SSRF)

<1:17.0.20+10-1.amzn2023.1
  • H
Resource Exhaustion

<1:17.0.20+8-1.amzn2023.1
  • H
Improper Verification of Cryptographic Signature

<1:17.0.20+8-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.20+8-1.amzn2023.1
  • H
Resource Exhaustion

<1:17.0.20+8-1.amzn2023.1
  • H
Inefficient Regular Expression Complexity

<1:17.0.20+8-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.20+8-1.amzn2023.1
  • H
NULL Pointer Dereference

<1:17.0.20+8-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.20+8-1.amzn2023.1
  • H
Cleartext Transmission of Sensitive Information

<1:17.0.19+10-1.amzn2023.1
  • H
Uncontrolled Recursion

<1:17.0.19+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:17.0.19+10-1.amzn2023.1
  • H
Out-of-bounds Read

<1:17.0.19+10-1.amzn2023.1
  • H
XML External Entity (XXE) Injection

<1:17.0.19+10-1.amzn2023.1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:17.0.19+10-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.19+10-1.amzn2023.1
  • H
CRLF Injection

<1:17.0.18+9-1.amzn2023.1
  • H
Improper Certificate Validation

<1:17.0.18+9-1.amzn2023.1
  • H
Key Exchange without Entity Authentication

<1:17.0.18+9-1.amzn2023.1
  • H
Improper Validation of Specified Type of Input

<1:17.0.18+9-1.amzn2023.1
  • M
Inappropriate Encoding for Output Context

<1:17.0.17+10-1.amzn2023.1
  • M
XML External Entity (XXE) Injection

<1:17.0.17+10-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.16+8-1.amzn2023.1
  • H
Missing Required Cryptographic Step

<1:17.0.16+8-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.16+8-1.amzn2023.1
  • H
Information Exposure

<1:17.0.16+8-1.amzn2023.1
  • H
Heap-based Buffer Overflow

<1:17.0.15+6-1.amzn2023.1
  • H
Buffer Overflow

<1:17.0.15+6-1.amzn2023.1
  • H
Information Exposure

<1:17.0.15+6-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:17.0.14+7-1.amzn2023.1
  • M
Uncontrolled Memory Allocation

<1:17.0.13+11-1.amzn2023.1
  • M
Integer Overflow or Wraparound

<1:17.0.13+11-1.amzn2023.1
  • M
Signed to Unsigned Conversion Error

<1:17.0.13+11-1.amzn2023.1
  • M
Improper Handling of Length Parameter Inconsistency

<1:17.0.13+11-1.amzn2023.1
  • H
CVE-2024-21131

<1:17.0.12+7-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.12+7-1.amzn2023.1
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.12+7-1.amzn2023.1
  • H
CVE-2024-21140

<1:17.0.12+7-1.amzn2023.1
  • H
CVE-2024-21147

<1:17.0.12+7-1.amzn2023.1
  • L
Reliance on Reverse DNS Resolution for a Security-Critical Action

<1:17.0.11+9-1.amzn2023.1
  • L
Integer Overflow or Wraparound

<1:17.0.11+9-1.amzn2023.1
  • L
Out-of-bounds Write

<1:17.0.11+9-1.amzn2023.1
  • L
Improper Output Neutralization for Logs

<1:17.0.11+9-1.amzn2023.1
  • H
CVE-2024-20922

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
Information Exposure Through Log Files

<1:17.0.10+7-1.amzn2023.1
  • H
CVE-2024-20925

<1:17.0.10+7-1.amzn2023.1
  • H
CVE-2024-20923

<1:17.0.10+7-1.amzn2023.1
  • H
Covert Timing Channel

<1:17.0.10+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.10+7-1.amzn2023.1
  • H
Out-of-bounds Write

<1:17.0.10+7-1.amzn2023.1
  • M
Improper Certificate Validation

<1:17.0.9+8-1.amzn2023.1
  • M
Out-of-Bounds

<1:17.0.9+8-1.amzn2023.1
  • M
Allocation of Resources Without Limits or Throttling

<1:17.0.8+7-1.amzn2023.1
  • M
Directory Traversal

<1:17.0.8+7-1.amzn2023.1
  • M
Directory Traversal

<1:17.0.8+7-1.amzn2023.1
  • M
Out-of-bounds Read

<1:17.0.8+7-1.amzn2023.1
  • M
Out-of-bounds Read

<1:17.0.8+7-1.amzn2023.1
  • M
Small Space of Random Values

<1:17.0.8+7-1.amzn2023.1
  • M
CVE-2023-22043

<1:17.0.8+7-1.amzn2023.1
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:17.0.8+7-1.amzn2023.1
  • H
Improperly Implemented Security Check for Standard

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.7+7-1.amzn2023.1
  • H
Information Exposure

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Input Validation

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Neutralization of Null Byte or NUL Character

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Neutralization of Null Byte or NUL Character

<1:17.0.7+7-1.amzn2023.1
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:17.0.7+7-1.amzn2023.1