- Vulnerability/
- USN-6263-1
USN-6263-1: OpenJDK vulnerabilities
First published: Tue Aug 01 2023(Updated: )
Motoyasu Saburi discovered that OpenJDK incorrectly handled special characters in file name parameters. An attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-22006) Eirik Bjørsnøs discovered that OpenJDK incorrectly handled certain ZIP archives. An attacker could possibly use this issue to cause a denial of service. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-22036) David Stancu discovered that OpenJDK had a flaw in the AES cipher implementation. An attacker could possibly use this issue to obtain sensitive information. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-22041) Zhiqiang Zang discovered that OpenJDK incorrectly handled array accesses when using the binary '%' operator. An attacker could possibly use this issue to obtain sensitive information. This issue only affected OpenJDK 17. (CVE-2023-22044) Zhiqiang Zang discovered that OpenJDK incorrectly handled array accesses. An attacker could possibly use this issue to obtain sensitive information. (CVE-2023-22045) It was discovered that OpenJDK incorrectly sanitized URIs strings. An attacker could possibly use this issue to insert, edit or obtain sensitive information. (CVE-2023-22049) It was discovered that OpenJDK incorrectly handled certain glyphs. An attacker could possibly use this issue to cause a denial of service. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-25193)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/openjdk-8-jre-headless | <8u382-ga-1~23.04.1 | 8u382-ga-1~23.04.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-8-jre | <8u382-ga-1~23.04.1 | 8u382-ga-1~23.04.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-11-jdk | <11.0.20+8-1ubuntu1~23.04 | 11.0.20+8-1ubuntu1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-headless | <17.0.8+7-1~23.04 | 17.0.8+7-1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-17-jre | <17.0.8+7-1~23.04 | 17.0.8+7-1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-17-jdk | <17.0.8+7-1~23.04 | 17.0.8+7-1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-zero | <17.0.8+7-1~23.04 | 17.0.8+7-1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-zero | <8u382-ga-1~23.04.1 | 8u382-ga-1~23.04.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-8-jdk | <8u382-ga-1~23.04.1 | 8u382-ga-1~23.04.1 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-zero | <11.0.20+8-1ubuntu1~23.04 | 11.0.20+8-1ubuntu1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-headless | <11.0.20+8-1ubuntu1~23.04 | 11.0.20+8-1ubuntu1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-11-jre | <11.0.20+8-1ubuntu1~23.04 | 11.0.20+8-1ubuntu1~23.04 |
| Ubuntu Ubuntu | =23.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-headless | <8u382-ga-1~22.04.1 | 8u382-ga-1~22.04.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-8-jre | <8u382-ga-1~22.04.1 | 8u382-ga-1~22.04.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-11-jdk | <11.0.20+8-1ubuntu1~22.04 | 11.0.20+8-1ubuntu1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-headless | <17.0.8+7-1~22.04 | 17.0.8+7-1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-17-jre | <17.0.8+7-1~22.04 | 17.0.8+7-1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-17-jdk | <17.0.8+7-1~22.04 | 17.0.8+7-1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-zero | <17.0.8+7-1~22.04 | 17.0.8+7-1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-zero | <8u382-ga-1~22.04.1 | 8u382-ga-1~22.04.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-8-jdk | <8u382-ga-1~22.04.1 | 8u382-ga-1~22.04.1 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-zero | <11.0.20+8-1ubuntu1~22.04 | 11.0.20+8-1ubuntu1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-headless | <11.0.20+8-1ubuntu1~22.04 | 11.0.20+8-1ubuntu1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-11-jre | <11.0.20+8-1ubuntu1~22.04 | 11.0.20+8-1ubuntu1~22.04 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-headless | <8u382-ga-1~20.04.1 | 8u382-ga-1~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-8-jre | <8u382-ga-1~20.04.1 | 8u382-ga-1~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-11-jdk | <11.0.20+8-1ubuntu1~20.04 | 11.0.20+8-1ubuntu1~20.04 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-headless | <17.0.8+7-1~20.04.2 | 17.0.8+7-1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-17-jre | <17.0.8+7-1~20.04.2 | 17.0.8+7-1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-17-jdk | <17.0.8+7-1~20.04.2 | 17.0.8+7-1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-zero | <17.0.8+7-1~20.04.2 | 17.0.8+7-1~20.04.2 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-zero | <8u382-ga-1~20.04.1 | 8u382-ga-1~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-8-jdk | <8u382-ga-1~20.04.1 | 8u382-ga-1~20.04.1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-zero | <11.0.20+8-1ubuntu1~20.04 | 11.0.20+8-1ubuntu1~20.04 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-headless | <11.0.20+8-1ubuntu1~20.04 | 11.0.20+8-1ubuntu1~20.04 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-11-jre | <11.0.20+8-1ubuntu1~20.04 | 11.0.20+8-1ubuntu1~20.04 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-headless | <8u382-ga-1~18.04.1 | 8u382-ga-1~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-8-jre | <8u382-ga-1~18.04.1 | 8u382-ga-1~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-11-jdk | <11.0.20+8-1ubuntu1~18.04 | 11.0.20+8-1ubuntu1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-headless | <17.0.8+7-1~18.04 | 17.0.8+7-1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-17-jre | <17.0.8+7-1~18.04 | 17.0.8+7-1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-17-jdk | <17.0.8+7-1~18.04 | 17.0.8+7-1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-17-jre-zero | <17.0.8+7-1~18.04 | 17.0.8+7-1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-zero | <8u382-ga-1~18.04.1 | 8u382-ga-1~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-8-jdk | <8u382-ga-1~18.04.1 | 8u382-ga-1~18.04.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-zero | <11.0.20+8-1ubuntu1~18.04 | 11.0.20+8-1ubuntu1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-11-jre-headless | <11.0.20+8-1ubuntu1~18.04 | 11.0.20+8-1ubuntu1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-11-jre | <11.0.20+8-1ubuntu1~18.04 | 11.0.20+8-1ubuntu1~18.04 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/openjdk-8-jdk | <8u382-ga-1~16.04.1 | 8u382-ga-1~16.04.1 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-headless | <8u382-ga-1~16.04.1 | 8u382-ga-1~16.04.1 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/openjdk-8-jre | <8u382-ga-1~16.04.1 | 8u382-ga-1~16.04.1 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/openjdk-8-jre-zero | <8u382-ga-1~16.04.1 | 8u382-ga-1~16.04.1 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2023-22045
- https://ubuntu.com/security/CVE-2023-22036
- https://ubuntu.com/security/CVE-2023-22044
- https://ubuntu.com/security/CVE-2023-25193
- https://ubuntu.com/security/CVE-2023-22049
- https://ubuntu.com/security/CVE-2023-22006
- https://ubuntu.com/security/CVE-2023-22041
- https://ubuntu.com/security/notices/USN-6272-1
- https://launchpad.net/ubuntu/+source/openjdk-8/8u382-ga-1~23.04.1
- https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.20+8-1ubuntu1~23.04
- https://launchpad.net/ubuntu/+source/openjdk-17/17.0.8+7-1~23.04
- https://launchpad.net/ubuntu/+source/openjdk-8/8u382-ga-1~22.04.1
- https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.20+8-1ubuntu1~22.04
- https://launchpad.net/ubuntu/+source/openjdk-17/17.0.8+7-1~22.04
- https://launchpad.net/ubuntu/+source/openjdk-8/8u382-ga-1~20.04.1
- https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.20+8-1ubuntu1~20.04
- https://launchpad.net/ubuntu/+source/openjdk-17/17.0.8+7-1~20.04.2
- https://ubuntu.com/security/notices/USN-6263-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-6272-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/23.04
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04