Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
OpenJDK 11 and 17 may allow network data leak
published 5 days ago
Summary
The networking part of OpenJDK versions 11 and 17 can be tricked into revealing information it shouldn't. This could let an attacker see data that is being sent or received over the network. Apply the latest security updates from your OpenJDK distribution or upgrade to a newer supported version to protect your systems.
What to do
- Update cleanstart openjdk11 to version 11.0.19_p7-r0.
- Update cleanstart openjdk17 to version 17.0.7_p7-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | openjdk11 |
< 11.0.19_p7-r0 Fix: upgrade to 11.0.19_p7-r0
|
| CleanStart | cleanstart | openjdk17 |
< 17.0.7_p7-r0 Fix: upgrade to 17.0.7_p7-r0
|
Original advisory text
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
CVE-2023-21937 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
CLEANSTART-2026-YR57820 · OSV
Track software like this
Free during beta