CVE-2023-21843

CWE-64612 documents9 sources
Severity
3.7LOW
EPSS
0.1%
top 69.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Oracle Corporation Java SE JDK AND JREAzul ZuluOracle Graalvm+2 more
Timeline
PublishedJan 18
Latest updateFeb 28

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can …

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages8 packages

▶NVDoracle/graalvm20.3.8, 21.3.4, 22.3.0+2
▶NVDoracle/jdk4 versions+3
▶NVDoracle/jre4 versions+3
▶Debianopenjdk-11< 11.0.18+10-1~deb11u1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

5
OSV
openjdk-17, openjdk-19, openjdk-lts vulnerabilities↗2023-02-28
▶
OSV
openjdk-8 vulnerabilities↗2023-02-28
▶
OSV
CVE-2023-21843: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound)↗2023-01-18
▶
GHSA
GHSA-w383-47g8-vfg7: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound)↗2023-01-18
▶
CVEList
CVE-2023-21843: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound)↗2023-01-17
▶

📋Vendor Advisories

6
Ubuntu
OpenJDK vulnerabilities↗2023-02-28
▶
Ubuntu
OpenJDK vulnerabilities↗2023-02-28
▶
Red Hat
OpenJDK: soundbank URL remote loading (Sound, 8293742)↗2023-01-17
▶
Oracle
Oracle Oracle Java SE Risk Matrix: Sound — CVE-2023-21843↗2023-01-15
▶
Microsoft
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.1↗2023-01-10
▶