CLSA-2025-1753799434
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1753799434.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1753799434
- Upstream
- Published
- 2025-07-29T14:30:38Z
- Modified
- 2026-05-27T11:36:13.892584313Z
- Summary
- java-1.8.0-openjdk: Fix of 19 CVEs
- Details
-
- Security fixes from OpenJDK 8u452-b09:
- CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data
- CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code
- CVE-2025-30691: allows limited data access via untrusted code using compiler APIs
- Security fixes from OpenJDK 8u442-b06:
- CVE-2025-21502: hotspot vulnerability enabling limited data access java clients
- Security fixes from OpenJDK 8u432-b06:
- CVE-2024-21235: sandbox bypass in java clients via exposed APIs
- CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS
- CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input
- CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments
- Security fixes from OpenJDK 8u422-b05:
- CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data
- CVE-2024-21145: enable limited unauthorized data access via untrusted java code
- CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code
- CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS
- CVE-2024-21131: remote access via API may lead to limited data modification
- CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments
- Security fixes from OpenJDK 8u412-b08:
- CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps
- CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments
- CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments
- CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments
- CVE-2024-21012: networking issue may allow limited data modification
- Security fixes from OpenJDK 8u452-b09:
- References