CVE catalog

CVE-2021-35561

openjdk-17: CVE-2021-35561

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Oct 19, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 6.95% · Oct 25, 2026

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openjdk-17	sid	`17.0.21+9-1`	fixed
Debian	openjdk-17	bookworm	`17.0.19+10-1~deb12u2`	fixed
Debian	openjdk-17	bookworm-security	`17.0.21+9-1~deb12u1`	fixed
Suse	java-1_8_0-ibm	openstack cloud 9	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	openstack cloud crowbar 9	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 12 sp4	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise software development kit 12 sp5	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp2-bcl	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp3-bcl	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp4-ltss	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 12 sp5	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 12 sp5	`1.8.0_sr7.10-30.90.1`	fixed
Suse	java-1_7_1-ibm	openstack cloud 9	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	openstack cloud crowbar 9	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 12 sp4	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise software development kit 12 sp5	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp2-bcl	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp3-bcl	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp4-ltss	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server 12 sp5	`1.7.1_sr5.10-38.71.1`	fixed
Suse	java-1_7_1-ibm	linux enterprise server for sap applications 12 sp5	`1.7.1_sr5.10-38.71.1`	fixed
Ubuntu	openjdk-8	pro	`8u66-b01-5`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-5`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b05-6`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-2ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-2ubuntu3`	vulnerable
Ubuntu	openjdk-8	pro	`8u72-b15-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-1ubuntu2`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu1`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu2`	vulnerable
Ubuntu	openjdk-8	pro	`8u77-b03-3ubuntu3`	vulnerable
Ubuntu	openjdk-8	pro	`8u91-b14-0ubuntu4~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u91-b14-3ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u111-b14-2ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u121-b13-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-0ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-2ubuntu1.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u131-b11-2ubuntu1.16.04.3`	vulnerable
Ubuntu	openjdk-8	pro	`8u151-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u162-b12-0ubuntu0.16.04.2`	vulnerable
Ubuntu	openjdk-8	pro	`8u171-b11-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u181-b13-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u181-b13-1ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u191-b12-0ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u191-b12-2ubuntu0.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u212-b03-0ubuntu1.16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u222-b10-1ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u232-b09-0ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u242-b08-0ubuntu3~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u252-b09-1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u265-b01-0ubuntu2~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u272-b10-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u275-b01-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u282-b08-0ubuntu1~16.04`	vulnerable
Ubuntu	openjdk-8	pro	`8u292-b10-0ubuntu1~16.04.1`	vulnerable
Ubuntu	openjdk-8	pro	`8u312-b07-0ubuntu1~16.04`	fixed
Ubuntu	openjdk-9	16.04	`9~b88-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b101-2ubuntu2`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b102-1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b113-0ubuntu1`	vulnerable
Ubuntu	openjdk-9	16.04	`9~b114-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u144-b01-2`	vulnerable
Ubuntu	openjdk-8	18.04	`8u151-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u162-b12-1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u171-b11-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u181-b13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-0ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u191-b12-2ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u212-b03-0ubuntu1.18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u222-b10-1ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u232-b09-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-8	18.04	`8u242-b08-0ubuntu3~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u252-b09-1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u265-b01-0ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u272-b10-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u275-b01-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u282-b08-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u292-b10-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-8	18.04	`8u312-b07-0ubuntu1~18.04`	fixed
Ubuntu	openjdk-lts	18.04	`9.0.4+12-2ubuntu4`	vulnerable
Ubuntu	openjdk-lts	18.04	`9.0.4+12-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-4ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10~46-5ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-1ubuntu2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.1+10-3ubuntu1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.2`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`10.0.2+13-1ubuntu0.18.04.4`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.2+9-3ubuntu1~18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.3+7-1ubuntu2~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.4+11-1ubuntu2~18.04.3`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.5+10-0ubuntu1.1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.6+10-1ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.7+10-2ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.8+10-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.9+11-0ubuntu1~18.04.1`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.9.1+1-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.10+9-0ubuntu1~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.11+9-0ubuntu2~18.04`	vulnerable
Ubuntu	openjdk-lts	18.04	`11.0.13+8-0ubuntu1~18.04`	fixed
Ubuntu	openjdk-8	20.04	`8u232-b09-0ubuntu1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u232-b09-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u242-b04-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u242-b08-0ubuntu3`	vulnerable
Ubuntu	openjdk-8	20.04	`8u252-b07-1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u252-b09-1ubuntu1`	vulnerable
Ubuntu	openjdk-8	20.04	`8u265-b01-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u272-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u275-b01-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u282-b08-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u292-b10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-8	20.04	`8u312-b07-0ubuntu1~20.04`	fixed
Ubuntu	openjdk-lts	20.04	`11.0.5+10-0ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.5+10-2ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.6+10-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.6+10-2ubuntu2`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+9-1ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+10-2ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.7+10-3ubuntu1`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.8+10-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.9+11-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.9.1+1-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.10+9-0ubuntu1~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.11+9-0ubuntu2~20.04`	vulnerable
Ubuntu	openjdk-lts	20.04	`11.0.13+8-0ubuntu1~20.04`	fixed
Ubuntu	openjdk-13	20.04	`13+33-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.1+9-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-1`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.2+8-2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.3+3-1ubuntu2`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.4+8-1~20.04`	vulnerable
Ubuntu	openjdk-13	20.04	`13.0.7+5-0ubuntu1~20.04`	vulnerable
Suse	java-1_8_0-ibm	linux enterprise module for legacy 15 sp3	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise module for legacy 15 sp4	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 15-ltss	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 15 sp1-bcl	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 15 sp1-ltss	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server 15 sp2-ltss	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 15	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 15 sp1	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	linux enterprise server for sap applications 15 sp2	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	manager proxy 4.1	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	manager retail branch server 4.1	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	manager server 4.1	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	enterprise storage 6	`1.8.0_sr7.10-150000.3.59.1`	fixed
Suse	java-1_8_0-ibm	enterprise storage 7	`1.8.0_sr7.10-150000.3.59.1`	fixed
Opensuse	java-1_8_0-ibm	leap 15.3	`1.8.0_sr7.10-150000.3.59.1`	fixed
Opensuse	java-1_8_0-ibm	leap 15.4	`1.8.0_sr7.10-150000.3.59.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openjdk-17	source	sid	`17.0.1+12-1`	not yet assigned	Not reported	Not reported
Debian	openjdk-17	source	bookworm	`17.0.1+12-1`	not yet assigned	Not reported	Not reported
Suse	java-1_8_0-ibm	rpm	openstack cloud 9	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	openstack cloud crowbar 9	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 12 sp4	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise software development kit 12 sp5	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp2-bcl	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp3-bcl	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp4-ltss	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 12 sp5	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 12 sp5	`1.8.0_sr7.10-30.90.1`	Not reported	SUSE-SU-2022:2540-1	Not reported
Suse	java-1_7_1-ibm	rpm	openstack cloud 9	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	openstack cloud crowbar 9	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 12 sp4	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise software development kit 12 sp5	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp2-bcl	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp3-bcl	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp4-ltss	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server 12 sp5	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Suse	java-1_7_1-ibm	rpm	linux enterprise server for sap applications 12 sp5	`1.7.1_sr5.10-38.71.1`	Not reported	SUSE-SU-2022:2539-1	Not reported
Ubuntu	openjdk-8	deb	pro	`8u312-b07-0ubuntu1~16.04`	Not reported	UBUNTU-CVE-2021-35561	Not reported
Ubuntu	openjdk-8	deb	18.04	`8u312-b07-0ubuntu1~18.04`	Not reported	UBUNTU-CVE-2021-35561	Not reported
Ubuntu	openjdk-lts	deb	18.04	`11.0.13+8-0ubuntu1~18.04`	Not reported	UBUNTU-CVE-2021-35561	Not reported
Ubuntu	openjdk-8	deb	20.04	`8u312-b07-0ubuntu1~20.04`	Not reported	UBUNTU-CVE-2021-35561	Not reported
Ubuntu	openjdk-lts	deb	20.04	`11.0.13+8-0ubuntu1~20.04`	Not reported	UBUNTU-CVE-2021-35561	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise module for legacy 15 sp3	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise module for legacy 15 sp4	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 15-ltss	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 15 sp1-bcl	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 15 sp1-ltss	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server 15 sp2-ltss	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 15	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 15 sp1	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	linux enterprise server for sap applications 15 sp2	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	manager proxy 4.1	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	manager retail branch server 4.1	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	manager server 4.1	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	enterprise storage 6	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Suse	java-1_8_0-ibm	rpm	enterprise storage 7	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Opensuse	java-1_8_0-ibm	rpm	leap 15.3	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported
Opensuse	java-1_8_0-ibm	rpm	leap 15.4	`1.8.0_sr7.10-150000.3.59.1`	Not reported	SUSE-SU-2022:2650-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[openjdk-17-dbg]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-demo]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-doc]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk-headless]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-headless]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-zero]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-source]Fixed
Source package: [openjdk-17]
Details (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Fixed · Fixed: 17.0.1+12-1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12

Observed: Oct 23, 2026, 5:58:32 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]