CVE-2022-21540

CWE-40210 documents9 sources

Severity

5.3MEDIUM

EPSS

0.4%

top 37.27%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Openjdk Oracle Corporation Java SE JDK AND JRE Azul Zulu +5 more

Timeline

PublishedJul 19

Latest updateAug 4

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages8 packages

▶CVEListV5oracle_corporation/java_se_jdk_and_jre8 versions+7

▶NVDoracle/graalvm20.3.6, 21.3.2, 22.1.0+2

▶NVDoracle/openjdk11 — 11.0.15+6

▶NVDoracle/jdk5 versions+4

▶NVDoracle/jre5 versions+4

Also affects: Debian Linux 10.0, 11.0, Fedora 36

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-975q-8v3h-8j23: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)↗2022-07-20

▶

OSV

CVE-2022-21540: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)↗2022-07-19

▶

CVEList

CVE-2022-21540: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)↗2022-07-19

▶

📋Vendor Advisories

Ubuntu

OpenJDK 8 vulnerabilities↗2022-08-04

▶

Ubuntu

OpenJDK vulnerabilities↗2022-08-04

▶

Red Hat

OpenJDK: class compilation issue (Hotspot, 8281859)↗2022-07-19

▶

Oracle

Oracle Oracle Java SE Risk Matrix: Hotspot — CVE-2022-21540↗2022-07-15

▶

Microsoft

▶