java-25-openjdk-crypto-adapter-fastdebug

Direct Vulnerabilities

Known vulnerabilities in the java-25-openjdk-crypto-adapter-fastdebug package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Improper Certificate Validation	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Syntactic Correctness of Input	*
M Incorrect Implementation of Authentication Algorithm	*
M Improper Certificate Validation	*
M XML External Entity (XXE) Injection	*
L Improper Certificate Validation	*
M HTTP Request Smuggling	*
M Improper Certificate Validation	*
M LDAP Injection	*
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
M XML Injection	*
L CRLF Injection	*
L Out-of-bounds Read	*
M Compiler Optimization Removal or Modification of Security-critical Code	*
L Out-of-bounds Read	*
L Exposure of Data Element to Wrong Session	*
M Improperly Implemented Security Check for Standard	*
L Allocation of Resources Without Limits or Throttling	*
L XML Injection	*
L Insufficient Compartmentalization	*
L Improper Validation of Integrity Check Value	*
M Directory Traversal	*
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Exposed Dangerous Method or Function	*
L Allocation of Resources Without Limits or Throttling	*
M Improperly Implemented Security Check for Standard	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Information Exposure Through Caching	*
M Insufficient Compartmentalization	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M Comparison Using Wrong Factors	*
M Directory Traversal	*
M Directory Traversal	*
L Improperly Implemented Security Check for Standard	*
M Incorrect Implementation of Authentication Algorithm	*
M Exposed Dangerous Method or Function	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
H Out-of-bounds Write	*
M Improper Validation of Integrity Check Value	*
M Use After Free	*
M Integer Overflow or Wraparound	*
M Resource Exhaustion	*
M Improper Validation of Consistency within Input	*
M Allocation of Resources Without Limits or Throttling	<1:25.0.4.1.1-1.1.el10
M Server-Side Request Forgery (SSRF)	<1:25.0.4.1.1-1.1.el10
M Uncaught Exception	<1:25.0.4.1.1-1.1.el10
M Improper Cross-boundary Removal of Sensitive Data	<1:25.0.4.1.1-1.1.el10
M Resource Exhaustion	<1:25.0.4.0.7-1.1.el10_2
L NULL Pointer Dereference	<1:25.0.4.0.7-1.1.el10_2
M Improper Certificate Validation	<1:25.0.4.0.7-1.1.el10_2
L Out-of-bounds Write	<1:25.0.4.0.7-1.1.el10_2
M Improper Certificate Validation	<1:25.0.4.0.7-1.1.el10_2
M Inefficient Regular Expression Complexity	<1:25.0.4.0.7-1.1.el10_2
H Improper Verification of Cryptographic Signature	<1:25.0.4.0.7-1.1.el10_2
M Resource Exhaustion	<1:25.0.4.0.7-1.1.el10_2
L Out-of-bounds Read	<1:25.0.3.0.9-1.el10_2
L Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3.0.9-1.el10_2
L Heap-based Buffer Overflow	<1:25.0.3.0.9-1.el10_2
L Use of a Broken or Risky Cryptographic Algorithm	<1:25.0.3.0.9-1.el10_2
M Cleartext Transmission of Sensitive Information	<1:25.0.3.0.9-1.el10_2
H XML External Entity (XXE) Injection	<1:25.0.3.0.9-1.el10_2
M Uncontrolled Recursion	<1:25.0.3.0.9-1.el10_2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:25.0.3.0.9-1.el10_2
M Integer Overflow or Wraparound	<1:25.0.4.0.7-1.1.el10_2
M Out-of-bounds Read	*
M Expired Pointer Dereference	*
M Expired Pointer Dereference	<1:25.0.3.0.9-1.el10_2
M Buffer Underflow	<1:25.0.3.0.9-1.el10_2
M Out-of-bounds Read	*
H Out-of-bounds Write	<1:25.0.3.0.9-1.el10_2
M Out-of-bounds Read	<1:25.0.3.0.9-1.el10_2
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M NULL Pointer Dereference	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Information Exposure	*
M Buffer Overflow	*
M Key Exchange without Entity Authentication	<1:25.0.2.0.10-1.el10
H Out-of-bounds Write	<1:25.0.2.0.10-1.el10
M CRLF Injection	<1:25.0.2.0.10-1.el10
H Out-of-bounds Read	<1:25.0.2.0.10-1.el10
H Improper Certificate Validation	<1:25.0.2.0.10-1.el10

java-25-openjdk-crypto-adapter-fastdebug

Direct Vulnerabilities

Fix vulnerabilities automatically