Moderate: java-11-openjdk security and bug fix update
Summary
ALSA-2023:0200: Moderate: java-11-openjdk security and bug fix update. Affects java-11-openjdk versions < 1:11.0.18.0.10-2.el8_7. Fixed in 1:11.0.18.0.10-2.el8_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. These packages are used for running Java applications and developing Java software. OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It is widely used in various applications and platforms.
Vulnerability Detail
The vulnerability in the java-11-openjdk package is classified as moderate. It includes two security fixes:
-
Handshake DoS attack against DTLS connections (CVE-2023-21835): This vulnerability allows an attacker to launch a denial-of-service attack against DTLS connections by exploiting a flaw in the handshake process.
-
Soundbank URL remote loading (CVE-2023-21843): This vulnerability enables remote loading of soundbank URLs, which can be exploited by an attacker to execute arbitrary code or perform other malicious actions.
These vulnerabilities can have various impacts, including service disruption, unauthorized code execution, and potential compromise of sensitive information.
How To Fix
Minimum fixed version
1:11.0.18.0.10-2.el8_7
This is the first release that contains the fix.
sudo dnf update java-11-openjdkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The java-11-openjdk package has been found to have two moderate vulnerabilities. It is crucial to update to the latest version (11.0.18.0.10-2.el8_7) to fix these vulnerabilities and ensure the security and stability of your Java applications and development environment. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for java-11-openjdk →
FAQ
Java-11-openjdk is an open-source implementation of the Java Platform, Standard Edition (Java SE) version 11. It provides the Java Runtime Environment and the Java Software Development Kit for running Java applications and developing Java software.
The handshake DoS attack vulnerability in java-11-openjdk can lead to a denial-of-service condition, causing service disruption and potentially affecting the availability of DTLS connections.
The soundbank URL remote loading vulnerability in java-11-openjdk allows an attacker to load soundbank URLs remotely, which can be exploited to execute arbitrary code or perform other malicious actions.
Yes, the vulnerabilities in java-11-openjdk have been fixed in version 11.0.18.0.10-2.el8_7. It is recommended to update to this version to mitigate the risks associated with these vulnerabilities.
You can find more information about these vulnerabilities, including their impact, CVSS score, acknowledgments, and related details, on the CVE pages listed in the References section of the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for java-11-openjdk.
