java-21-openjdk-headless-fastdebug

Direct Vulnerabilities

Known vulnerabilities in the java-21-openjdk-headless-fastdebug package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H HTTP Request Smuggling	<1:21.0.13.0.9-1.1.el8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.13.0.9-1.1.el8
H Directory Traversal	<1:21.0.13.0.9-1.1.el8
H HTTP Request Smuggling	<1:21.0.13.0.9-1.1.el8
H HTTP Request Smuggling	<1:21.0.13.0.9-1.1.el8
H Exposed Dangerous Method or Function	<1:21.0.13.0.9-1.1.el8
L Allocation of Resources Without Limits or Throttling	*
H Comparison Using Wrong Factors	<1:21.0.13.0.9-1.1.el8
H Improper Certificate Validation	*
H Improper Validation of Integrity Check Value	<1:21.0.13.0.9-1.1.el8
H Out-of-bounds Read	<1:21.0.13.0.9-1.1.el8
H HTTP Request Smuggling	<1:21.0.13.0.9-1.1.el8
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<1:21.0.13.0.9-1.1.el8
H Directory Traversal	<1:21.0.13.0.9-1.1.el8
H XML Injection	<1:21.0.13.0.9-1.1.el8
H Improperly Implemented Security Check for Standard	<1:21.0.13.0.9-1.1.el8
H Improperly Implemented Security Check for Standard	<1:21.0.13.0.9-1.1.el8
H Allocation of Resources Without Limits or Throttling	<1:21.0.13.0.9-1.1.el8
H HTTP Request Smuggling	<1:21.0.13.0.9-1.1.el8
H Improper Validation of Integrity Check Value	<1:21.0.13.0.9-1.1.el8
M Improper Validation of Syntactic Correctness of Input	*
H Out-of-bounds Write	<1:21.0.13.0.9-1.1.el8
H Improper Handling of Highly Compressed Data (Data Amplification)	<1:21.0.13.0.9-1.1.el8
H Exposed Dangerous Method or Function	<1:21.0.13.0.9-1.1.el8
H Allocation of Resources Without Limits or Throttling	<1:21.0.13.0.9-1.1.el8
H Incorrect Implementation of Authentication Algorithm	<1:21.0.13.0.9-1.1.el8
H Information Exposure Through Caching	<1:21.0.13.0.9-1.1.el8
H Insufficient Compartmentalization	<1:21.0.13.0.9-1.1.el8
H Exposure of Data Element to Wrong Session	<1:21.0.13.0.9-1.1.el8
H CRLF Injection	<1:21.0.13.0.9-1.1.el8
H Directory Traversal	<1:21.0.13.0.9-1.1.el8
H Insufficient Compartmentalization	<1:21.0.13.0.9-1.1.el8
H Compiler Optimization Removal or Modification of Security-critical Code	<1:21.0.13.0.9-1.1.el8
H LDAP Injection	<1:21.0.13.0.9-1.1.el8
H Improper Certificate Validation	<1:21.0.13.0.9-1.1.el8
H Improperly Implemented Security Check for Standard	<1:21.0.13.0.9-1.1.el8
H XML Injection	<1:21.0.13.0.9-1.1.el8
H Improper Certificate Validation	<1:21.0.13.0.9-1.1.el8
H XML External Entity (XXE) Injection	<1:21.0.13.0.9-1.1.el8
H Incorrect Implementation of Authentication Algorithm	<1:21.0.13.0.9-1.1.el8
M Use After Free	*
H Improper Certificate Validation	<1:21.0.13.0.9-1.1.el8
M Resource Exhaustion	*
M Integer Overflow or Wraparound	*
M Improper Validation of Consistency within Input	*
M Allocation of Resources Without Limits or Throttling	<1:21.0.12.1.1-1.1.el8
M Improper Cross-boundary Removal of Sensitive Data	<1:21.0.12.1.1-1.1.el8
M Server-Side Request Forgery (SSRF)	<1:21.0.12.1.1-1.1.el8
H Out-of-bounds Write	<1:21.0.12.0.8-1.1.el8
H Improper Verification of Cryptographic Signature	<1:21.0.12.0.8-1.1.el8
H Improper Certificate Validation	<1:21.0.12.0.8-1.1.el8
H Resource Exhaustion	<1:21.0.12.0.8-1.1.el8
H NULL Pointer Dereference	<1:21.0.12.0.8-1.1.el8
H Improper Certificate Validation	<1:21.0.12.0.8-1.1.el8
H Inefficient Regular Expression Complexity	<1:21.0.12.0.8-1.1.el8
H Resource Exhaustion	<1:21.0.12.0.8-1.1.el8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.11.0.10-1.el8
H Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-1.el8
H Use of a Broken or Risky Cryptographic Algorithm	<1:21.0.11.0.10-1.el8
H Cleartext Transmission of Sensitive Information	<1:21.0.11.0.10-1.el8
H Uncontrolled Recursion	<1:21.0.11.0.10-1.el8
H Out-of-bounds Read	<1:21.0.11.0.10-1.el8
H XML External Entity (XXE) Injection	<1:21.0.11.0.10-1.el8
H Integer Overflow or Wraparound	<1:21.0.12.0.8-1.1.el8
M Expired Pointer Dereference	*
H Expired Pointer Dereference	<1:21.0.11.0.10-1.el8
H Buffer Underflow	<1:21.0.11.0.10-1.el8
H Out-of-bounds Write	<1:21.0.11.0.10-1.el8
H Out-of-bounds Read	<1:21.0.11.0.10-1.el8
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Buffer Overflow	*
H Improper Certificate Validation	<1:21.0.10.0.7-1.el8
H Key Exchange without Entity Authentication	<1:21.0.10.0.7-1.el8
H CRLF Injection	<1:21.0.10.0.7-1.el8
M NULL Pointer Dereference	*
H Out-of-bounds Read	<1:21.0.11.0.10-1.el8
H Out-of-bounds Read	<1:21.0.11.0.10-1.el8
M Out-of-bounds Read	*
H Out-of-bounds Read	<1:21.0.10.0.7-1.el8
M Out-of-bounds Read	*
H Out-of-bounds Write	<1:21.0.10.0.7-1.el8
M Object Model Violation: Just One of Equals and Hashcode Defined	<1:21.0.9.0.10-1.el8
M XML External Entity (XXE) Injection	<1:21.0.9.0.10-1.el8
M Inappropriate Encoding for Output Context	<1:21.0.9.0.10-1.el8
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el8
H Information Exposure	<1:21.0.8.0.9-1.el8
H Heap-based Buffer Overflow	<1:21.0.8.0.9-1.el8
H Missing Required Cryptographic Step	<1:21.0.8.0.9-1.el8
M Buffer Overflow	<1:21.0.7.0.6-1.el8
M Heap-based Buffer Overflow	<1:21.0.7.0.6-1.el8
M Information Exposure	<1:21.0.7.0.6-1.el8
M Signed to Unsigned Conversion Error	<1:21.0.6.0.7-1.el8
M Integer Overflow or Wraparound	<1:21.0.5.0.10-3.el8
M Signed to Unsigned Conversion Error	<1:21.0.5.0.10-3.el8
M Uncontrolled Memory Allocation	<1:21.0.5.0.10-3.el8
M Improper Handling of Length Parameter Inconsistency	<1:21.0.5.0.10-3.el8
H CVE-2024-21147	<1:21.0.4.0.7-1.el8
H Out-of-bounds Write	<1:21.0.4.0.7-1.el8
H CVE-2024-21140	<1:21.0.4.0.7-1.el8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:21.0.4.0.7-1.el8
H CVE-2024-21131	<1:21.0.4.0.7-1.el8
M Out-of-bounds Write	<1:21.0.3.0.9-1.el8
M Integer Overflow or Wraparound	<1:21.0.3.0.9-1.el8
M Reliance on Reverse DNS Resolution for a Security-Critical Action	<1:21.0.3.0.9-1.el8
M Improper Output Neutralization for Logs	<1:21.0.3.0.9-1.el8
H Improper Input Validation	<1:21.0.2.0.13-1.el8
H Covert Timing Channel	<1:21.0.2.0.13-1.el8
H Out-of-bounds Write	<1:21.0.2.0.13-1.el8
H Improper Input Validation	<1:21.0.2.0.13-1.el8
H Information Exposure Through Log Files	<1:21.0.2.0.13-1.el8
M Out-of-Bounds	<1:21.0.5.0.10-3.el8
M Improper Certificate Validation	<1:21.0.1.0.12-2.el8
M Out-of-Bounds	<1:21.0.1.0.12-2.el8

java-21-openjdk-headless-fastdebug

Direct Vulnerabilities

Fix vulnerabilities automatically