java-11-openjdk-devel vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the java-11-openjdk-devel package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Out-of-bounds Read

<1:11.0.24.0.8-3.el8
  • H
CVE-2024-21140

<1:11.0.24.0.8-3.el8
  • H
Improper Input Validation

<1:11.0.24.0.8-3.el8
  • H
CVE-2024-21147

<1:11.0.24.0.8-3.el8
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:11.0.24.0.8-3.el8
  • H
CVE-2024-21131

<1:11.0.24.0.8-3.el8
  • M
Out-of-bounds Write

<1:11.0.23.0.9-3.el8
  • M
Uncontrolled Memory Allocation

<1:11.0.23.0.9-3.el8
  • M
Integer Overflow or Wraparound

<1:11.0.23.0.9-3.el8
  • M
Improper Output Neutralization for Logs

<1:11.0.23.0.9-3.el8
  • M
Reliance on Reverse DNS Resolution for a Security-Critical Action

<1:11.0.23.0.9-3.el8
  • H
Improper Input Validation

<1:11.0.22.0.7-2.el8
  • H
Covert Timing Channel

<1:11.0.22.0.7-2.el8
  • H
Integer Overflow or Wraparound

<1:11.0.22.0.7-2.el8
  • H
Improper Input Validation

<1:11.0.22.0.7-2.el8
  • H
Improper Input Validation

<1:11.0.22.0.7-2.el8
  • H
Information Exposure Through Log Files

<1:11.0.22.0.7-2.el8
  • M
Out-of-Bounds

*
  • M
Improper Certificate Validation

<1:11.0.21.0.9-2.el8
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:11.0.20.0.8-2.el8
  • M
Small Space of Random Values

<1:11.0.20.0.8-2.el8
  • M
Out-of-bounds Read

<1:11.0.20.0.8-2.el8
  • M
Directory Traversal

<1:11.0.20.0.8-2.el8
  • M
Directory Traversal

<1:11.0.20.0.8-2.el8
  • H
Improper Input Validation

<1:11.0.19.0.7-1.el8_7
  • H
Improperly Implemented Security Check for Standard

<1:11.0.19.0.7-1.el8_7
  • H
Improper Input Validation

<1:11.0.19.0.7-1.el8_7
  • H
Improper Neutralization of Null Byte or NUL Character

<1:11.0.19.0.7-1.el8_7
  • H
Information Exposure

<1:11.0.19.0.7-1.el8_7
  • H
Improper Neutralization of Null Byte or NUL Character

<1:11.0.19.0.7-1.el8_7
  • H
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

<1:11.0.19.0.7-1.el8_7
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.20.0.8-2.el8
  • M
Resource Exhaustion

<1:11.0.18.0.10-2.el8_7
  • M
Reliance on File Name or Extension of Externally-Supplied File

<1:11.0.18.0.10-2.el8_7
  • L
NULL Pointer Dereference

*
  • M
Authentication Bypass

<1:11.0.17.0.8-2.el8_6
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.17.0.8-2.el8_6
  • M
Resource Exhaustion

<1:11.0.17.0.8-2.el8_6
  • M
Use of Insufficiently Random Values

<1:11.0.17.0.8-2.el8_6
  • M
Integer Coercion Error

<1:11.0.17.0.8-2.el8_6
  • M
Buffer Overflow

<1:11.0.17.0.8-2.el8_6
  • H
Integer Coercion Error

<1:11.0.16.0.8-1.el8_6
  • H
Improper Access Control

<1:11.0.16.0.8-1.el8_6
  • H
Resource Leak

<1:11.0.16.0.8-1.el8_6
  • M
Integer Overflow or Wraparound

<1:11.0.17.0.8-2.el8_6
  • H
Improper Use of Validation Framework

<1:11.0.15.0.9-2.el8_5
  • H
Incorrect Behavior Order: Early Validation

<1:11.0.15.0.9-2.el8_5
  • H
Integer Underflow

<1:11.0.15.0.9-2.el8_5
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<1:11.0.15.0.9-2.el8_5
  • H
Resource Exhaustion

<1:11.0.15.0.9-2.el8_5
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.14.0.9-2.el8_5
  • M
Integer Overflow or Wraparound

<1:11.0.14.0.9-2.el8_5
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.14.0.9-2.el8_5
  • M
Improper Use of Validation Framework

<1:11.0.14.0.9-2.el8_5
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.14.0.9-2.el8_5
  • M
Integer Overflow or Wraparound

<1:11.0.14.0.9-2.el8_5
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:11.0.14.0.9-2.el8_5
  • M
Improper Authorization

<1:11.0.14.0.9-2.el8_5
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.14.0.9-2.el8_5
  • M
Improper Use of Validation Framework

<1:11.0.14.0.9-2.el8_5
  • M
Out-of-bounds Write

<1:11.0.14.0.9-2.el8_5
  • M
Uncaught Exception

<1:11.0.14.0.9-2.el8_5
  • M
Improper Cross-boundary Removal of Sensitive Data

<1:11.0.14.0.9-2.el8_5
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.14.0.9-2.el8_5
  • M
Deserialization of Untrusted Data

<1:11.0.14.0.9-2.el8_5
  • H
Information Exposure

<1:11.0.13.0.8-1.el8_4
  • H
NULL Pointer Dereference

<1:11.0.13.0.8-1.el8_4
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.13.0.8-1.el8_4
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:11.0.13.0.8-1.el8_4
  • H
Incorrect Authorization

<1:11.0.13.0.8-1.el8_4
  • H
Improper Input Validation

<1:11.0.13.0.8-1.el8_4
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.13.0.8-1.el8_4
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.13.0.8-1.el8_4
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.13.0.8-1.el8_4
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:11.0.13.0.8-1.el8_4
  • H
Information Exposure

<1:11.0.12.0.7-0.el8_4
  • H
Improper Verification of Cryptographic Signature

<1:11.0.12.0.7-0.el8_4
  • H
Insufficient Comparison

<1:11.0.12.0.7-0.el8_4
  • M
Use of a Broken or Risky Cryptographic Algorithm

<1:11.0.11.0.9-0.el8_3
  • M
Integer Overflow or Wraparound

<1:11.0.9.11-0.el8_2
  • M
Improper Certificate Validation

<1:11.0.9.11-0.el8_2
  • M
Cleartext Transmission of Sensitive Information

<1:11.0.9.11-0.el8_2
  • M
CVE-2020-14796

<1:11.0.9.11-0.el8_2
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.9.11-0.el8_2
  • M
Improper Input Validation

<1:11.0.9.11-0.el8_2
  • M
Time-of-check Time-of-use (TOCTOU)

<1:11.0.9.11-0.el8_2
  • H
CVE-2020-14573

<1:11.0.8.10-0.el8_2
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.8.10-0.el8_2
  • H
Out-of-Bounds

<1:11.0.8.10-0.el8_2
  • H
Improper Input Validation

<1:11.0.8.10-0.el8_2
  • H
CVE-2020-14577

<1:11.0.8.10-0.el8_2
  • H
Out-of-Bounds

<1:11.0.8.10-0.el8_2
  • H
CVE-2020-14556

<1:11.0.8.10-0.el8_2
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:11.0.7.10-1.el8_1
  • H
Out-of-Bounds

<1:11.0.7.10-1.el8_1
  • H
Uncaught Exception

<1:11.0.7.10-1.el8_1
  • H
Improperly Implemented Security Check for Standard

<1:11.0.7.10-1.el8_1
  • H
Improper Input Validation

<1:11.0.7.10-1.el8_1
  • H
Improperly Implemented Security Check for Standard

<1:11.0.7.10-1.el8_1
  • H
CVE-2020-2781

<1:11.0.7.10-1.el8_1
  • H
Uncaught Exception

<1:11.0.7.10-1.el8_1
  • H
Uncaught Exception

<1:11.0.7.10-1.el8_1
  • H
Uncaught Exception

<1:11.0.7.10-1.el8_1
  • H
HTTP Response Splitting

<1:11.0.7.10-1.el8_1
  • H
Uncaught Exception

<1:11.0.7.10-1.el8_1
  • H
Incorrect Regular Expression

<1:11.0.7.10-1.el8_1
  • H
Use of a Broken or Risky Cryptographic Algorithm

<1:11.0.6.10-0.el8_1
  • H
Encoding Error

<1:11.0.6.10-0.el8_1
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.6.10-0.el8_1
  • H
Modification of Assumed-Immutable Data (MAID)

<1:11.0.6.10-0.el8_1
  • H
Improper Enforcement of Behavioral Workflow

<1:11.0.6.10-0.el8_1
  • H
Improper Input Validation

<1:11.0.6.10-0.el8_1
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.6.10-0.el8_1
  • H
Allocation of Resources Without Limits or Throttling

<1:11.0.5.10-0.el8_0
  • H
Cross-site Scripting (XSS)

<1:11.0.5.10-0.el8_0
  • H
Uncaught Exception

<1:11.0.5.10-0.el8_0
  • H
Out-of-bounds Read

<1:11.0.5.10-0.el8_0
  • H
CVE-2019-2945

<1:11.0.5.10-0.el8_0
  • H
Uncaught Exception

<1:11.0.5.10-0.el8_0
  • H
Uncaught Exception

<1:11.0.5.10-0.el8_0
  • H
Integer Overflow or Wraparound

<1:11.0.5.10-0.el8_0
  • H
Uncaught Exception

<1:11.0.5.10-0.el8_0
  • H
Uncaught Exception

<1:11.0.5.10-0.el8_0
  • H
CVE-2019-2978

<1:11.0.5.10-0.el8_0
  • H
Cross-site Scripting (XSS)

<1:11.0.5.10-0.el8_0
  • H
Insufficiently Protected Credentials

<1:11.0.5.10-0.el8_0
  • H
NULL Pointer Dereference

<1:11.0.5.10-0.el8_0
  • H
Improper Input Validation

<1:11.0.5.10-0.el8_0
  • M
Improperly Implemented Security Check for Standard

<1:11.0.4.11-0.el8_0
  • M
Covert Timing Channel

<1:11.0.4.11-0.el8_0
  • M
CVE-2019-2762

<1:11.0.4.11-0.el8_0
  • M
Covert Timing Channel

<1:11.0.4.11-0.el8_0
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.4.11-0.el8_0
  • M
Improper Input Validation

<1:11.0.4.11-0.el8_0
  • M
CVE-2019-2786

<1:11.0.4.11-0.el8_0
  • M
CVE-2019-2684

<1:11.0.3.7-2.el8_0
  • M
Allocation of Resources Without Limits or Throttling

<1:11.0.3.7-2.el8_0