Threats Tagged 'cve-2024-21094'

Multiple security vulnerabilities have been identified in the java-1.8.0-openjdk packages for Red Hat Enterprise Linux 7. These include issues such as a long exception message causing a crash, integer overflow in the C1 compiler address generation, excessive memory allocation in Pack200, and a compilation failure in the C2 compiler. Red Hat has released an update addressing these vulnerabilities. The update requires restarting all running OpenJDK Java instances to take effect. The security impact is rated as moderate.

This security advisory from Red Hat addresses multiple vulnerabilities in the java-1.8.0-openjdk packages, which provide the OpenJDK 8 Java Runtime Environment and Software Development Kit. The fixed issues include a crash caused by long exception messages, an integer overflow in the C1 compiler address generation, excessive memory allocation in Pack200, and a compilation failure in the C2 compiler. The update is rated with a moderate security impact. Red Hat has released patches for affected Red Hat Enterprise Linux versions and advises restarting all running OpenJDK Java instances after applying the update.

A security update for the java-11-openjdk packages on Red Hat Enterprise Linux 7 addresses multiple vulnerabilities including crashes from long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. These issues have been rated with moderate severity by Red Hat Product Security. The update requires restarting all running OpenJDK Java instances to take effect.

Multiple security vulnerabilities affecting the java-11-openjdk packages in Red Hat Enterprise Linux have been addressed in a security update. These include issues such as crashes from long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. The update is rated with moderate severity and applies to various Red Hat Enterprise Linux 8 and 9 versions and architectures. Users must apply the update and restart all running OpenJDK Java instances to mitigate these issues.

Multiple security vulnerabilities have been identified and fixed in the java-17-openjdk packages provided by Red Hat, which include the OpenJDK 17 Java Runtime Environment and Software Development Kit. The issues addressed include a crash caused by a long Exception message, an integer overflow in the C1 compiler address generation, a failure in C2 compilation due to exceeding an internal array, and an improper reverse DNS lookup in the HTTP/2 client. These vulnerabilities have been rated with a moderate security impact by Red Hat. Updates are available for various Red Hat Enterprise Linux versions and architectures. Applying the update requires restarting all running OpenJDK Java instances for the fixes to take effect.

Multiple vulnerabilities have been identified in the java-21-openjdk packages used in Red Hat Enterprise Linux 8 and 9. These include a long exception message that can cause a crash (CVE-2024-21011), an integer overflow in the C1 compiler address generation (CVE-2024-21068), and an improper reverse DNS lookup in the HTTP/2 client (CVE-2024-21012). Red Hat has issued a security update addressing these issues with a moderate security impact rating.