Threats Tagged 'cve-2024-21085'

Multiple security vulnerabilities have been identified and fixed in the java-11-openjdk packages provided by Red Hat for OpenJDK 11. These include issues such as crashes from long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. The update addresses these vulnerabilities across various Red Hat Enterprise Linux 8 and 9 versions and related update services. The security impact is rated as moderate by Red Hat.

Multiple security vulnerabilities have been identified and fixed in the java-11-openjdk packages provided by Red Hat for OpenJDK 11. These include issues such as crashes caused by long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. The update addresses these moderate-impact vulnerabilities affecting Red Hat Enterprise Linux 7 variants. Users must apply the update and restart all running OpenJDK Java instances for the fixes to take effect.

Multiple security vulnerabilities have been identified and fixed in the java-21-openjdk packages provided by Red Hat for OpenJDK 21. These include a long exception message causing a crash, an integer overflow in the C1 compiler address generation, and an improper reverse DNS lookup in the HTTP/2 client. The update addresses these issues in Red Hat Enterprise Linux versions 8 and 9 and related distributions. The security impact is rated as moderate by Red Hat. No CVSS scores are provided in the advisory. The update is available and should be applied to affected systems.

Multiple security vulnerabilities have been identified and fixed in the java-1.8.0-openjdk packages provided by Red Hat for OpenJDK 8. These include issues such as a long exception message causing a crash, an integer overflow in the C1 compiler address generation, excessive memory allocation in Pack200, and a compilation failure due to exceeding an internal array. The update addresses these moderate severity issues across various Red Hat Enterprise Linux 8 and 9 versions and their extended update support variants. Users must apply the update and restart all running OpenJDK Java instances for the fixes to take effect.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix(es): * OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011) * OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068) * OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085) * OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.