Catálogo de CVE

CVE-2023-21937

openjdk-17 affected and fixed versions

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Gravedad: Low · CVSS 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Published: Apr 18, 2023, 8:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.22% · Oct 27, 2026

Projects and upstream resources

[openjdk-21][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiansid	openjdk-17	`17.0.21+9-1`	Fixed	[CVE-2023-21937]
Debiansid	openjdk-17	`17.0.7+7-1`	FixedDistribution-reported fixed boundary	[CVE-2023-21937]
Debianbookworm-security	openjdk-17	`17.0.21+9-1~deb12u1`	Fixed	[CVE-2023-21937]
Debianbookworm	openjdk-17	`17.0.19+10-1~deb12u2`	Fixed	[CVE-2023-21937]
Debianbookworm	openjdk-17	`17.0.7+7-1~deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2023-21937]

Showing 5 fix observations. All 191 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Debianbookworm	openjdk-17	`17.0.19+10-1~deb12u2`	Fixed	[CVE-2023-21937]
Debianbookworm	openjdk-17	`17.0.7+7-1~deb12u1`	FixedDistribution-reported fixed boundary	[CVE-2023-21937]
Debianbookworm-security	openjdk-17	`17.0.21+9-1~deb12u1`	Fixed	[CVE-2023-21937]
Debiansid	openjdk-17	`17.0.21+9-1`	Fixed	[CVE-2023-21937]
Debiansid	openjdk-17	`17.0.7+7-1`	FixedDistribution-reported fixed boundary	[CVE-2023-21937]
Ubuntu16.04	openjdk-9	`9~b101-2ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu16.04	openjdk-9	`9~b102-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu16.04	openjdk-9	`9~b113-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu16.04	openjdk-9	`9~b114-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu16.04	openjdk-9	`9~b88-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17+35-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.1+12-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.2+8-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.3+7-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.4+8-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.5+8-2ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.6+10-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-17	`17.0.7+7~us1-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u144-b01-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u151-b12-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u162-b12-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u171-b11-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u181-b13-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u181-b13-1ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u191-b12-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u191-b12-2ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u212-b03-0ubuntu1.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u222-b10-1ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u232-b09-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u242-b08-0ubuntu3~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u252-b09-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u265-b01-0ubuntu2~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u272-b10-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u275-b01-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u282-b08-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u292-b10-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u312-b07-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u342-b07-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u352-ga-1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u362-ga-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-8	`8u372-ga~us1-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.1+10-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.1+10-3ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.2+13-1ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.2+13-1ubuntu0.18.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.2+13-1ubuntu0.18.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10.0.2+13-1ubuntu0.18.04.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10~46-4ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`10~46-5ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.10+9-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.11+9-0ubuntu2~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.13+8-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.14+9-0ubuntu2~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.14.1+1-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.15+10-0ubuntu0.18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.16+8-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.17+8-1ubuntu2~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.18+10-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.19+7~us1-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.2+9-3ubuntu1~18.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.3+7-1ubuntu2~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.4+11-1ubuntu2~18.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.5+10-0ubuntu1.1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.6+10-1ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.7+10-2ubuntu2~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.8+10-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.9+11-0ubuntu1~18.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`11.0.9.1+1-0ubuntu1~18.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`9.0.4+12-2ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu18.04	openjdk-lts	`9.0.4+12-4ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13+33-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.1+9-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.2+8-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.2+8-2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.3+3-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.4+8-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-13	`13.0.7+5-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-16	`16.0.1+9-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17+35-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.1+12-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.2+8-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.3+7-0ubuntu0.20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.4+8-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.5+8-2ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.6+10-0ubuntu1~20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-17	`17.0.7+7~us1-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u232-b09-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u232-b09-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u242-b04-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u242-b08-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u252-b07-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u252-b09-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u265-b01-0ubuntu2~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u272-b10-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u275-b01-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u282-b08-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u292-b10-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u312-b07-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u342-b07-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u352-ga-1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u362-ga-0ubuntu1~20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-8	`8u372-ga~us1-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.10+9-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.11+9-0ubuntu2~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.13+8-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.14+9-0ubuntu2~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.14.1+1-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.15+10-0ubuntu0.20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.16+8-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.17+8-1ubuntu2~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.18+10-0ubuntu1~20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.19+7~us1-0ubuntu1~20.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.5+10-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.5+10-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.6+10-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.6+10-2ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.7+10-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.7+10-3ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.7+9-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.8+10-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.9+11-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu20.04	openjdk-lts	`11.0.9.1+1-0ubuntu1~20.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17+35-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.1+12-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.2+8-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.3+7-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.4+8-1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.5+8-2ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.6+10-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-17	`17.0.7+7~us1-0ubuntu1~22.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-18	`18.0.2+9-2~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-18	`18~15ea-4`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-18	`18~20ea-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-18	`18~32ea-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-18	`18~36ea-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u302-b08-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u312-b07-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u342-b07-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u352-ga-1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u362-ga-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-8	`8u372-ga~us1-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.12+7-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.13+8-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.14+9-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.14.1+1-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.15+10-0ubuntu0.22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.16+8-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.17+8-1ubuntu2~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.18+10-0ubuntu1~22.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntu22.04	openjdk-lts	`11.0.19+7~us1-0ubuntu1~22.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u111-b14-2ubuntu0.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u121-b13-0ubuntu1.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u131-b11-0ubuntu1.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u131-b11-2ubuntu1.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u131-b11-2ubuntu1.16.04.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u151-b12-0ubuntu0.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u162-b12-0ubuntu0.16.04.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u171-b11-0ubuntu0.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u181-b13-0ubuntu0.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u181-b13-1ubuntu0.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u191-b12-0ubuntu0.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u191-b12-2ubuntu0.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u212-b03-0ubuntu1.16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u222-b10-1ubuntu1~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u232-b09-0ubuntu1~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u242-b08-0ubuntu3~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u252-b09-1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u265-b01-0ubuntu2~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u272-b10-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u275-b01-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u282-b08-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u292-b10-0ubuntu1~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u312-b07-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u342-b07-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u352-ga-1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u362-ga-0ubuntu1~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u372-ga~us1-0ubuntu1~16.04`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u66-b01-5`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b05-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b05-5`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b05-6`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b15-1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b15-2ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b15-2ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u72-b15-3ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u77-b03-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u77-b03-3ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u77-b03-3ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u77-b03-3ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u91-b14-0ubuntu4~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC
Ubuntupro	openjdk-8	`8u91-b14-3ubuntu1~16.04.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2023-21937]Feb 4, 2026, 3:24:51 AM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "openjdk-17",
      "status": "fixed",
      "release": "sid",
      "version": "17.0.21+9-1"
    },
    {
      "name": "openjdk-17",
      "status": "fixed",
      "release": "bookworm",
      "version": "17.0.19+10-1~deb12u2"
    },
    {
      "name": "openjdk-17",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "17.0.21+9-1~deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1035957,
      "name": "openjdk-17",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "17.0.7+7-1"
    },
    {
      "bug": 1035957,
      "name": "openjdk-17",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "17.0.7+7-1~deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "openjdk-8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8u372-ga~us1-0ubuntu1~16.04"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "8u66-b01-5",
        "8u72-b05-1ubuntu1",
        "8u72-b05-5",
        "8u72-b05-6",
        "8u72-b15-1",
        "8u72-b15-2ubuntu1",
        "8u72-b15-2ubuntu3",
        "8u72-b15-3ubuntu1",
        "8u77-b03-1ubuntu2",
        "8u77-b03-3ubuntu1",
        "8u77-b03-3ubuntu2",
        "8u77-b03-3ubuntu3",
        "8u91-b14-0ubuntu4~16.04.1",
        "8u91-b14-3ubuntu1~16.04.1",
        "8u111-b14-2ubuntu0.16.04.2",
        "8u121-b13-0ubuntu1.16.04.2",
        "8u131-b11-0ubuntu1.16.04.2",
        "8u131-b11-2ubuntu1.16.04.2",
        "8u131-b11-2ubuntu1.16.04.3",
        "8u151-b12-0ubuntu0.16.04.2",
        "8u162-b12-0ubuntu0.16.04.2",
        "8u171-b11-0ubuntu0.16.04.1",
        "8u181-b13-0ubuntu0.16.04.1",
        "8u181-b13-1ubuntu0.16.04.1",
        "8u191-b12-0ubuntu0.16.04.1",
        "8u191-b12-2ubuntu0.16.04.1",
        "8u212-b03-0ubuntu1.16.04.1",
        "8u222-b10-1ubuntu1~16.04.1",
        "8u232-b09-0ubuntu1~16.04.1",
        "8u242-b08-0ubuntu3~16.04",
        "8u252-b09-1~16.04",
        "8u265-b01-0ubuntu2~16.04",
        "8u272-b10-0ubuntu1~16.04",
        "8u275-b01-0ubuntu1~16.04",
        "8u282-b08-0ubuntu1~16.04",
        "8u292-b10-0ubuntu1~16.04.1",
        "8u312-b07-0ubuntu1~16.04",
        "8u342-b07-0ubuntu1~16.04",
        "8u352-ga-1~16.04",
        "8u362-ga-0ubuntu1~16.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "8u372-ga~us1-0ubuntu1~16.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-9",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "9~b88-1",
        "9~b101-2ubuntu2",
        "9~b102-1",
        "9~b113-0ubuntu1",
        "9~b114-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-17",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.0.7+7~us1-0ubuntu1~18.04"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "17+35-1~18.04",
        "17.0.1+12-1~18.04",
        "17.0.2+8-1~18.04",
        "17.0.3+7-0ubuntu0.18.04.1",
        "17.0.4+8-1~18.04",
        "17.0.5+8-2ubuntu1~18.04",
        "17.0.6+10-0ubuntu1~18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "17.0.7+7~us1-0ubuntu1~18.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8u372-ga~us1-0ubuntu1~18.04"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "8u144-b01-2",
        "8u151-b12-1",
        "8u162-b12-1",
        "8u171-b11-0ubuntu0.18.04.1",
        "8u181-b13-0ubuntu0.18.04.1",
        "8u181-b13-1ubuntu0.18.04.1",
        "8u191-b12-0ubuntu0.18.04.1",
        "8u191-b12-2ubuntu0.18.04.1",
        "8u212-b03-0ubuntu1.18.04.1",
        "8u222-b10-1ubuntu1~18.04.1",
        "8u232-b09-0ubuntu1~18.04.1",
        "8u242-b08-0ubuntu3~18.04",
        "8u252-b09-1~18.04",
        "8u265-b01-0ubuntu2~18.04",
        "8u272-b10-0ubuntu1~18.04",
        "8u275-b01-0ubuntu1~18.04",
        "8u282-b08-0ubuntu1~18.04",
        "8u292-b10-0ubuntu1~18.04",
        "8u312-b07-0ubuntu1~18.04",
        "8u342-b07-0ubuntu1~18.04",
        "8u352-ga-1~18.04",
        "8u362-ga-0ubuntu1~18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "8u372-ga~us1-0ubuntu1~18.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-lts",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "11.0.19+7~us1-0ubuntu1~18.04.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "9.0.4+12-2ubuntu4",
        "9.0.4+12-4ubuntu1",
        "10~46-4ubuntu1",
        "10~46-5ubuntu1",
        "10.0.1+10-1ubuntu2",
        "10.0.1+10-3ubuntu1",
        "10.0.2+13-1ubuntu0.18.04.1",
        "10.0.2+13-1ubuntu0.18.04.2",
        "10.0.2+13-1ubuntu0.18.04.3",
        "10.0.2+13-1ubuntu0.18.04.4",
        "11.0.2+9-3ubuntu1~18.04.3",
        "11.0.3+7-1ubuntu2~18.04.1",
        "11.0.4+11-1ubuntu2~18.04.3",
        "11.0.5+10-0ubuntu1.1~18.04",
        "11.0.6+10-1ubuntu1~18.04.1",
        "11.0.7+10-2ubuntu2~18.04",
        "11.0.8+10-0ubuntu1~18.04.1",
        "11.0.9+11-0ubuntu1~18.04.1",
        "11.0.9.1+1-0ubuntu1~18.04",
        "11.0.10+9-0ubuntu1~18.04",
        "11.0.11+9-0ubuntu2~18.04",
        "11.0.13+8-0ubuntu1~18.04",
        "11.0.14+9-0ubuntu2~18.04",
        "11.0.14.1+1-0ubuntu1~18.04",
        "11.0.15+10-0ubuntu0.18.04.1",
        "11.0.16+8-0ubuntu1~18.04",
        "11.0.17+8-1ubuntu2~18.04",
        "11.0.18+10-0ubuntu1~18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "11.0.19+7~us1-0ubuntu1~18.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-17",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.0.7+7~us1-0ubuntu1~20.04"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "17+35-1~20.04",
        "17.0.1+12-1~20.04",
        "17.0.2+8-1~20.04",
        "17.0.3+7-0ubuntu0.20.04.1",
        "17.0.4+8-1~20.04",
        "17.0.5+8-2ubuntu1~20.04",
        "17.0.6+10-0ubuntu1~20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "17.0.7+7~us1-0ubuntu1~20.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8u372-ga~us1-0ubuntu1~20.04"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "8u232-b09-0ubuntu1",
        "8u232-b09-1",
        "8u242-b04-1",
        "8u242-b08-0ubuntu3",
        "8u252-b07-1",
        "8u252-b09-1ubuntu1",
        "8u265-b01-0ubuntu2~20.04",
        "8u272-b10-0ubuntu1~20.04",
        "8u275-b01-0ubuntu1~20.04",
        "8u282-b08-0ubuntu1~20.04",
        "8u292-b10-0ubuntu1~20.04",
        "8u312-b07-0ubuntu1~20.04",
        "8u342-b07-0ubuntu1~20.04",
        "8u352-ga-1~20.04",
        "8u362-ga-0ubuntu1~20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "8u372-ga~us1-0ubuntu1~20.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-lts",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "11.0.19+7~us1-0ubuntu1~20.04.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "11.0.5+10-0ubuntu1",
        "11.0.5+10-2ubuntu1",
        "11.0.6+10-1ubuntu1",
        "11.0.6+10-2ubuntu2",
        "11.0.7+9-1ubuntu1",
        "11.0.7+10-2ubuntu1",
        "11.0.7+10-3ubuntu1",
        "11.0.8+10-0ubuntu1~20.04",
        "11.0.9+11-0ubuntu1~20.04",
        "11.0.9.1+1-0ubuntu1~20.04",
        "11.0.10+9-0ubuntu1~20.04",
        "11.0.11+9-0ubuntu2~20.04",
        "11.0.13+8-0ubuntu1~20.04",
        "11.0.14+9-0ubuntu2~20.04",
        "11.0.14.1+1-0ubuntu1~20.04",
        "11.0.15+10-0ubuntu0.20.04.1",
        "11.0.16+8-0ubuntu1~20.04",
        "11.0.17+8-1ubuntu2~20.04",
        "11.0.18+10-0ubuntu1~20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "11.0.19+7~us1-0ubuntu1~20.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-13",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "13+33-1",
        "13.0.1+9-2",
        "13.0.2+8-1",
        "13.0.2+8-2",
        "13.0.3+3-1ubuntu2",
        "13.0.4+8-1~20.04",
        "13.0.7+5-0ubuntu1~20.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "16.0.1+9-1~20.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-17",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.0.7+7~us1-0ubuntu1~22.04.2"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "17+35-1",
        "17.0.1+12-1",
        "17.0.2+8-1",
        "17.0.3+7-0ubuntu0.22.04.1",
        "17.0.4+8-1~22.04",
        "17.0.5+8-2ubuntu1~22.04",
        "17.0.6+10-0ubuntu1~22.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "17.0.7+7~us1-0ubuntu1~22.04.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-18",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "18~15ea-4",
        "18~20ea-1",
        "18~32ea-1",
        "18~36ea-1",
        "18.0.2+9-2~22.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8u372-ga~us1-0ubuntu1~22.04"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "8u302-b08-0ubuntu2",
        "8u312-b07-0ubuntu1",
        "8u342-b07-0ubuntu1~22.04",
        "8u352-ga-1~22.04",
        "8u362-ga-0ubuntu1~22.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "8u372-ga~us1-0ubuntu1~22.04",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    },
    {
      "name": "openjdk-lts",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "11.0.19+7~us1-0ubuntu1~22.04.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "11.0.12+7-0ubuntu3",
        "11.0.13+8-0ubuntu1",
        "11.0.14+9-0ubuntu2",
        "11.0.14.1+1-0ubuntu1",
        "11.0.15+10-0ubuntu0.22.04.1",
        "11.0.16+8-0ubuntu1~22.04",
        "11.0.17+8-1ubuntu2~22.04",
        "11.0.18+10-0ubuntu1~22.04"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-21937",
      "fixed_version": "11.0.19+7~us1-0ubuntu1~22.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2023-21937",
      "provider_updated_at": "2026-02-04T03:24:51.788572Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1035957]

OpenFactory catalog packages

La asociación de paquetes está en curso.

[Debian 12 (Bookworm)]

[openjdk-17-dbg]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-demo]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-doc]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jdk-headless]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-headless]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-jre-zero]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · amd64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · arm64 · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · amd64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · arm64 · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
[openjdk-17-source]Desconocido
Paquete fuente: [openjdk-17]
Detalles (4)
- 17.0.19+10-1~deb12u2 · all · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.19+10-1~deb12u2 · all · bookworm
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12
- 17.0.20.1+1-1~deb12u1 · all · bookworm-security
  Corregida · Corregida: 17.0.7+7-1~deb12u1
  dsa · openjdk-17 · debian · bookworm; dsa · openjdk-17 · debian · 12

Observado: Oct 28, 2026, 5:47:02 PM UTC

Referencias

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]