Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
Red Hat Java 11 OpenJDK may let attackers run code
published 2 years ago
Summary
Red Hat’s Java 11 runtime and its related development packages contain a flaw that could allow a malicious program to execute code with the same rights as the Java process. This could let an attacker perform unauthorized actions on the system. Update to the latest Red Hat Java 11 OpenJDK packages as soon as possible.
What to do
- Update redhat java-11-openjdk to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-debugsource to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-demo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-javadoc to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-javadoc-zip to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-jmods to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-src to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-static-libs to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-demo-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-demo-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel-fastdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-devel-slowdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-fastdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless-fastdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-headless-slowdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-jmods-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-jmods-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-slowdebug-debuginfo to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-src-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-src-slowdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-static-libs-fastdebug to version 1:11.0.18.0.10-1.el9_0.
- Update redhat java-11-openjdk-static-libs-slowdebug to version 1:11.0.18.0.10-1.el9_0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-debugsource |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-demo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-devel |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-devel-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-headless |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-headless-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-javadoc |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-javadoc-zip |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-jmods |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-src |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::appstream | redhat | java-11-openjdk-static-libs |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-debugsource |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-demo-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-demo-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-devel-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-devel-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-devel-fastdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-devel-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-devel-slowdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-fastdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-headless-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-headless-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-headless-fastdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-headless-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-headless-slowdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-jmods-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-jmods-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-slowdebug-debuginfo |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-src-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-src-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-static-libs-fastdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
| Red Hat:rhel_eus:9.0::crb | redhat | java-11-openjdk-static-libs-slowdebug |
< 1:11.0.18.0.10-1.el9_0 Fix: upgrade to 1:11.0.18.0.10-1.el9_0
|
Original advisory text
Red Hat Security Advisory: java-11-openjdk security update
References
- https://access.redhat.com/errata/RHSA-2023:0201 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2160421 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2160475 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0201.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-21835 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-21835 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-21835 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-21843 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-21843 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-21843 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2023:0201 · OSV
Track software like this
Free during beta