Debian Openjdk-8 vulnerabilities

CVE-2020-2604 [HIGH] CVE-2020-2604: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Success

CVE-2015-0395 [CRITICAL] CVE-2015-0395: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows ... Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Scope: local sid: resolved (fixed in 8u40~b22-1)

CVE-2019-2684 [MEDIUM] CVE-2019-2684: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful att

CVE-2015-0460 [CRITICAL] CVE-2015-0460: openjdk-8 - Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows ... Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Scope: local sid: resolved (fixed in 8u45-b14-1)

CVE-2017-10101 [CRITICAL] CVE-2017-10101: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attack

CVE-2017-10107 [CRITICAL] CVE-2017-10107: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks

CVE-2017-10096 [CRITICAL] CVE-2017-10096: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attack

CVE-2017-10090 [CRITICAL] CVE-2017-10090: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks

CVE-2017-10087 [CRITICAL] CVE-2017-10087: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful a

CVE-2017-3289 [CRITICAL] CVE-2017-3289: openjdk-8 - Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subc... Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks requ

CVE-2017-10089 [CRITICAL] CVE-2017-10089: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO)... Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the a

CVE-2017-10110 [CRITICAL] CVE-2017-10110: openjdk-8 - Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Su... Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attac

CVE-2016-0494 [CRITICAL] CVE-2016-0494: icu - Unspecified vulnerability in the Java SE and Java SE Embedded components in Orac... Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Scope: local bookworm: resolved (fixed in 57.1-4) bullseye: resolved (fixed in 57.1-4) forky: resolved (fixed in 57.1

CVE-2015-4731 [CRITICAL] CVE-2015-4731: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedd... Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. Scope: local sid: resolved (fixed in 8u66-b01-1)

CVE-2014-6549 [CRITICAL] CVE-2014-6549: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affe... Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Scope: local sid: resolved (fixed in 8u40~b22-1)

CVE-2020-2803 [HIGH] CVE-2020-2803: openjdk-11 - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (compon... Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful atta

CVE-2016-5573 [HIGH] CVE-2016-5573: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Emb... Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582. Scope: local sid: resolved (fixed in 8u111-b14-1)

CVE-2022-21476 [HIGH] CVE-2022-21476: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product o... Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via

CVE-2014-6562 [CRITICAL] CVE-2014-6562: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affe... Unspecified vulnerability in Oracle Java SE 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Scope: local sid: resolved (fixed in 8u40~b09-1)

CVE-2025-50059 [HIGH] CVE-2025-50059: openjdk-11 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Easily exploitable v