Vulnerability-Lookup

CVE-2024-21235 (GCVE-0-2024-21235)

Vulnerability from cvelistv5 – Published: 2024-10-15 19:52 – Updated: 2025-11-03 21:53

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.

Assigner

oracle

References

1 reference

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2024.html	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	Oracle Java SE	Affected: Oracle Java SE:8u421 Affected: Oracle Java SE:8u421-perf Affected: Oracle Java SE:11.0.24 Affected: Oracle Java SE:17.0.12 Affected: Oracle Java SE:21.0.4 Affected: Oracle Java SE:23 Affected: Oracle GraalVM for JDK:17.0.12 Affected: Oracle GraalVM for JDK:21.0.4 Affected: Oracle GraalVM for JDK:23 Affected: Oracle GraalVM Enterprise Edition:20.3.15 Affected: Oracle GraalVM Enterprise Edition:21.3.11 cpe:2.3:a:oracle:java_se:8u421:::::::* cpe:2.3:a:oracle:java_se:8u421::::enterprise_performance::: cpe:2.3:a:oracle:java_se:11.0.24:::::::* cpe:2.3:a:oracle:java_se:17.0.12:::::::* cpe:2.3:a:oracle:java_se:21.0.4:::::::* cpe:2.3:a:oracle:java_se:23:::::::* cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::* cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::* cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::* cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise::: cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21235",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-16T14:30:43.618436Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-25T17:00:08.660Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:53:14.636Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:oracle:java_se:8u421:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:java_se:8u421:*:*:*:enterprise_performance:*:*:*",
            "cpe:2.3:a:oracle:java_se:11.0.24:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:java_se:17.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:java_se:21.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:java_se:23:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:graalvm_for_jdk:23:*:*:*:*:*:*:*",
            "cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:enterprise:*:*:*",
            "cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:enterprise:*:*:*"
          ],
          "product": "Oracle Java SE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Oracle Java SE:8u421"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:8u421-perf"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:11.0.24"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:17.0.12"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:21.0.4"
            },
            {
              "status": "affected",
              "version": "Oracle Java SE:23"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:17.0.12"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:21.0.4"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM for JDK:23"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:20.3.15"
            },
            {
              "status": "affected",
              "version": "Oracle GraalVM Enterprise Edition:21.3.11"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-10-15T19:52:46.900Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2024.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2024-21235",
    "datePublished": "2024-10-15T19:52:46.900Z",
    "dateReserved": "2023-12-07T22:28:10.698Z",
    "dateUpdated": "2025-11-03T21:53:14.636Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-21235",
      "date": "2026-05-29",
      "epss": "0.00171",
      "percentile": "0.38064"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-21235\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2024-10-15T20:15:12.643\",\"lastModified\":\"2025-11-03T22:16:43.870\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Hotspot). Las versiones compatibles afectadas son Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 y 21.3.11. Esta vulnerabilidad, dif\u00edcil de explotar, permite que un atacante no autenticado con acceso a la red a trav\u00e9s de m\u00faltiples protocolos ponga en peligro Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserciones o eliminaciones de algunos datos accesibles de Oracle Java SE, Oracle GraalVM for JDK y Oracle GraalVM Enterprise Edition, as\u00ed como acceso no autorizado a lecturas de un subconjunto de datos accesibles de Oracle Java SE, Oracle GraalVM for JDK y Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se puede explotar mediante el uso de API en el componente especificado, por ejemplo, a trav\u00e9s de un servicio web que proporciona datos a las API. Esta vulnerabilidad tambi\u00e9n se aplica a implementaciones de Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java en entornos aislados, que cargan y ejecutan c\u00f3digo no confiable (por ejemplo, c\u00f3digo que proviene de Internet) y dependen del entorno aislado de Java para su seguridad. Puntuaci\u00f3n base de CVSS 3.1: 4,8 (impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert_us@oracle.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N\",\"baseScore\":4.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":2.5}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"93A899CF-69C5-46A3-BE20-E9F128FB079E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"44A007AC-88D1-4F18-B1AD-C69600AD643C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDDE5C6D-036C-42FC-BD31-366175914F3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4162209C-031A-4AD9-9F19-445236332DA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm_for_jdk:23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DD0AB0E-208D-4856-9F31-3A4BB5213FB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update421:*:*:-:*:*:*\",\"matchCriteriaId\":\"9C681771-C202-4A4A-A357-A18286023C71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update421:*:*:enterprise_performance_pack:*:*:*\",\"matchCriteriaId\":\"EBBF3C52-6ACD-45F4-9245-719AC2A96473\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:11.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"199C19B3-D4FC-4925-A249-9889242B7452\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:17.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0161CF7-985D-4832-B2DC-90CC1F9CB1ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:21.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21DC98DB-A180-4E74-9049-427B60AA574A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9137A4EB-820C-4F05-983A-5534CFB0E019\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update421:*:*:-:*:*:*\",\"matchCriteriaId\":\"C3128079-D0DB-4708-B3C9-74B6A7CCAB98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update421:*:*:enterprise_performance_pack:*:*:*\",\"matchCriteriaId\":\"BDA0765B-413B-4FFF-BC00-94C84FE4BFBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:11.0.24:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FE84109-8702-41A7-B18A-C399737EBF27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:17.0.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EB0A022-55BA-4968-A7CE-619BF1389981\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:21.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29F12FD7-FB8A-4420-83D2-6C94A787A841\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:23:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5792796D-D244-4382-8DE2-30359F5CD9CD\"}]}]}],\"references\":[{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2024.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T21:53:14.636Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-21235\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-16T14:30:43.618436Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-16T14:30:48.664Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:oracle:java_se:8u421:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:java_se:8u421:*:*:*:enterprise_performance:*:*:*\", \"cpe:2.3:a:oracle:java_se:11.0.24:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:java_se:17.0.12:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:java_se:21.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:java_se:23:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:graalvm_for_jdk:23:*:*:*:*:*:*:*\", \"cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:enterprise:*:*:*\", \"cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:enterprise:*:*:*\"], \"vendor\": \"Oracle Corporation\", \"product\": \"Oracle Java SE\", \"versions\": [{\"status\": \"affected\", \"version\": \"Oracle Java SE:8u421\"}, {\"status\": \"affected\", \"version\": \"Oracle Java SE:8u421-perf\"}, {\"status\": \"affected\", \"version\": \"Oracle Java SE:11.0.24\"}, {\"status\": \"affected\", \"version\": \"Oracle Java SE:17.0.12\"}, {\"status\": \"affected\", \"version\": \"Oracle Java SE:21.0.4\"}, {\"status\": \"affected\", \"version\": \"Oracle Java SE:23\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM for JDK:17.0.12\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM for JDK:21.0.4\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM for JDK:23\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM Enterprise Edition:20.3.15\"}, {\"status\": \"affected\", \"version\": \"Oracle GraalVM Enterprise Edition:21.3.11\"}]}], \"references\": [{\"url\": \"https://www.oracle.com/security-alerts/cpuoct2024.html\", \"name\": \"Oracle Advisory\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"description\": \"Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.\"}]}], \"providerMetadata\": {\"orgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"shortName\": \"oracle\", \"dateUpdated\": \"2024-10-15T19:52:46.900Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-21235\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T21:53:14.636Z\", \"dateReserved\": \"2023-12-07T22:28:10.698Z\", \"assignerOrgId\": \"43595867-4340-4103-b7a2-9a5208d29a85\", \"datePublished\": \"2024-10-15T19:52:46.900Z\", \"assignerShortName\": \"oracle\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0199

Vulnerability from certfr_avis - Published: 2026-02-24 - Updated: 2026-02-24

De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une injection de code indirecte à distance (XSS).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
VMware	Telco Cloud Platform	Telco Cloud Platform versions 4.x et 5.x sans le correctif de sécurité KB428241
VMware	Tanzu Data Services	Tanzu Data Flow versions antérieures à 2.0.2 sur Tanzu Platform
VMware	Azure Spring Enterprise	Harbor Registry versions antérieures à 2.14.2
VMware	Tanzu Data Intelligence	Tanzu pour MySQL versions 2.0.0 sur Kubernetes
VMware	Cloud Foundation	Cloud Foundation versions 9.x antérieures à 9.0.2.0
VMware	Tanzu Kubernetes Runtime	App Metrics versions antérieures à2.3.3
VMware	Tanzu Data Intelligence	Tanzu GemFire versions antérieures à 2.6.1 sur Kubernetes
VMware	Tanzu Kubernetes Runtime	CredHub Secrets Management pour Tanzu Platform versions antérieures à 1.6.8
VMware	Tanzu Data Intelligence	Tanzu pour Valkey version 3.3.1 sur Kubernetes
VMware	Tanzu Operations Manager	Foundation Core pour Tanzu Platform versions antérieures à 3.2.4
VMware	Aria Operations	Aria Operations versions 8.x antérieures à 8.18.6
VMware	Tanzu Kubernetes Runtime	cf-mgmt pour Tanzu Platform versions antérieures à 1.0.108
VMware	Tanzu Data Intelligence	Tanzu pour Valkey version 9.0.1
VMware	Tanzu Kubernetes Runtime	Extended App Support pour Tanzu Platform versions antérieures à 1.0.15
VMware	Tanzu Data Intelligence	Tanzu GemFire Management versions antérieures à 1.4.3
VMware	Tanzu Kubernetes Runtime	NodeJS Buildpack versions antérieures à 1.8.77
VMware	Tanzu Kubernetes Runtime	Cloud Native Buildpacks pour Tanzu Platform versions antérieures à 0.6.5
VMware	Cloud Foundation	Cloud Foundation versions 4.x et 5.x sans le correctif de sécurité KB92148
VMware	Tanzu Kubernetes Runtime	AI Services pour Tanzu Platform versions antérieures à 10.3.4
VMware	Tanzu Kubernetes Runtime	Java Buildpack versions antérieures à 4.89.0
VMware	Telco Cloud Infrastructure	Telco Cloud Infrastructure versions 2.x et 3.x sans le correctif de sécurité KB428241
VMware	Tanzu Kubernetes Runtime	Elastic Application Runtime pour Tanzu Platform versions antérieures à 6.0.25+LTS-T, 10.2.8+LTS-T et 10.3.5

References

Title

Publication Time

CERTFR-2026-AVI-0249

Vulnerability from certfr_avis - Published: 2026-03-06 - Updated: 2026-03-06

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
IBM	QRadar	QRadar Data Synchronization App versions antérieures à 3.3.0
IBM	Db2	DB2 Data Management Console versions antérieures à 3.1.13
IBM	Tivoli	Tivoli Netcool/OMNIbus_GUI sans le dernier correctif de sécurité
IBM	Db2	DB2 Recovery Expert versions antérieures à 5.5.0.1 Interim Fix 8
IBM	Db2	Db2 Warehouse on Cloud Pak for Data versions antérieures à 5.3.1
IBM	Db2	Db2 on Cloud Pak for Data versions antérieures à 5.3.1
IBM	QRadar	QRadar Pre-Validation App versions antérieures à 2.0.2

References

Title

Publication Time

CNVD-2024-44544

Vulnerability from cnvd - Published: 2024-11-14

Title

Oracle Java SE存在未明漏洞（CNVD-2024-44544）

Description

Oracle Java SE是美国甲骨文（Oracle）公司的一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。 Oracle Java SE的Oracle Java SE、Oracle GraalVM for JDK和Oracle GraalVM Enterprise Edition存在安全漏洞。攻击者可利用该漏洞更新、插入或删除部分可访问数据。

Severity

中

Patch Name

Oracle Java SE存在未明漏洞（CNVD-2024-44544）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.oracle.com/security-alerts/cpuoct2024.html

Reference

https://www.oracle.com/security-alerts/cpuoct2024.html

Impacted products

Name
['Oracle Java SE 23', 'Oracle graalvm for jdk 17.0.12', 'Oracle graalvm for jdk 21.0.4', 'Oracle graalvm for jdk 23', 'Oracle GraalVM Enterprise Edition 20.3.15', 'Oracle GraalVM Enterprise Edition 21.3.11', 'Oracle Java SE 8u421', 'Oracle Java SE 8u421-perf', 'Oracle Java SE 11.0.24', 'Oracle Java SE 17.0.12', 'Oracle Java SE 21.0.4']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-21235",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-21235"
    }
  },
  "description": "Oracle Java SE\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002\n\nOracle Java SE\u7684Oracle Java SE\u3001Oracle GraalVM for JDK\u548cOracle GraalVM Enterprise Edition\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u90e8\u5206\u53ef\u8bbf\u95ee\u6570\u636e\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.oracle.com/security-alerts/cpuoct2024.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-44544",
  "openTime": "2024-11-14",
  "patchDescription": "Oracle Java SE\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7528\u4e8e\u5f00\u53d1\u548c\u90e8\u7f72\u684c\u9762\u3001\u670d\u52a1\u5668\u4ee5\u53ca\u5d4c\u5165\u8bbe\u5907\u548c\u5b9e\u65f6\u73af\u5883\u4e2d\u7684Java\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nOracle Java SE\u7684Oracle Java SE\u3001Oracle GraalVM for JDK\u548cOracle GraalVM Enterprise Edition\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u66f4\u65b0\u3001\u63d2\u5165\u6216\u5220\u9664\u90e8\u5206\u53ef\u8bbf\u95ee\u6570\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Java SE\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2024-44544\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Java SE 23",
      "Oracle graalvm for jdk 17.0.12",
      "Oracle graalvm for jdk 21.0.4",
      "Oracle graalvm for jdk 23",
      "Oracle GraalVM Enterprise Edition 20.3.15",
      "Oracle GraalVM Enterprise Edition 21.3.11",
      "Oracle Java SE 8u421",
      "Oracle Java SE 8u421-perf",
      "Oracle Java SE 11.0.24",
      "Oracle Java SE 17.0.12",
      "Oracle Java SE 21.0.4"
    ]
  },
  "referenceLink": "https://www.oracle.com/security-alerts/cpuoct2024.html",
  "serverity": "\u4e2d",
  "submitTime": "2024-10-23",
  "title": "Oracle Java SE\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\uff08CNVD-2024-44544\uff09"
}

FKIE_CVE-2024-21235

Vulnerability from fkie_nvd - Published: 2024-10-15 20:15 - Updated: 2025-11-03 22:16

Severity

4.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Summary

References

URL	Tags
secalert_us@oracle.com	https://www.oracle.com/security-alerts/cpuoct2024.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html
af854a3a-2127-422b-91ae-364da2661108	https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html

Impacted products

Vendor	Product	Version
oracle	graalvm	20.3.15
oracle	graalvm	21.3.11
oracle	graalvm_for_jdk	17.0.12
oracle	graalvm_for_jdk	21.0.4
oracle	graalvm_for_jdk	23
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	11.0.24
oracle	jdk	17.0.12
oracle	jdk	21.0.4
oracle	jdk	23
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	11.0.24
oracle	jre	17.0.12
oracle	jre	21.0.4
oracle	jre	23

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "93A899CF-69C5-46A3-BE20-E9F128FB079E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:enterprise:*:*:*",
              "matchCriteriaId": "44A007AC-88D1-4F18-B1AD-C69600AD643C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDDE5C6D-036C-42FC-BD31-366175914F3E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4162209C-031A-4AD9-9F19-445236332DA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:23:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DD0AB0E-208D-4856-9F31-3A4BB5213FB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update421:*:*:-:*:*:*",
              "matchCriteriaId": "9C681771-C202-4A4A-A357-A18286023C71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:1.8.0:update421:*:*:enterprise_performance_pack:*:*:*",
              "matchCriteriaId": "EBBF3C52-6ACD-45F4-9245-719AC2A96473",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:11.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "199C19B3-D4FC-4925-A249-9889242B7452",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:17.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0161CF7-985D-4832-B2DC-90CC1F9CB1ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:21.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "21DC98DB-A180-4E74-9049-427B60AA574A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jdk:23:*:*:*:*:*:*:*",
              "matchCriteriaId": "9137A4EB-820C-4F05-983A-5534CFB0E019",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update421:*:*:-:*:*:*",
              "matchCriteriaId": "C3128079-D0DB-4708-B3C9-74B6A7CCAB98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.8.0:update421:*:*:enterprise_performance_pack:*:*:*",
              "matchCriteriaId": "BDA0765B-413B-4FFF-BC00-94C84FE4BFBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:11.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FE84109-8702-41A7-B18A-C399737EBF27",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:17.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EB0A022-55BA-4968-A7CE-619BF1389981",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:21.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "29F12FD7-FB8A-4420-83D2-6C94A787A841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:23:*:*:*:*:*:*:*",
              "matchCriteriaId": "5792796D-D244-4382-8DE2-30359F5CD9CD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el producto Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Hotspot). Las versiones compatibles afectadas son Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 y 21.3.11. Esta vulnerabilidad, dif\u00edcil de explotar, permite que un atacante no autenticado con acceso a la red a trav\u00e9s de m\u00faltiples protocolos ponga en peligro Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a actualizaciones, inserciones o eliminaciones de algunos datos accesibles de Oracle Java SE, Oracle GraalVM for JDK y Oracle GraalVM Enterprise Edition, as\u00ed como acceso no autorizado a lecturas de un subconjunto de datos accesibles de Oracle Java SE, Oracle GraalVM for JDK y Oracle GraalVM Enterprise Edition. Nota: Esta vulnerabilidad se puede explotar mediante el uso de API en el componente especificado, por ejemplo, a trav\u00e9s de un servicio web que proporciona datos a las API. Esta vulnerabilidad tambi\u00e9n se aplica a implementaciones de Java, normalmente en clientes que ejecutan aplicaciones Java Web Start o applets Java en entornos aislados, que cargan y ejecutan c\u00f3digo no confiable (por ejemplo, c\u00f3digo que proviene de Internet) y dependen del entorno aislado de Java para su seguridad. Puntuaci\u00f3n base de CVSS 3.1: 4,8 (impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
    }
  ],
  "id": "CVE-2024-21235",
  "lastModified": "2025-11-03T22:16:43.870",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 2.5,
        "source": "secalert_us@oracle.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-10-15T20:15:12.643",
  "references": [
    {
      "source": "secalert_us@oracle.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuoct2024.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html"
    }
  ],
  "sourceIdentifier": "secalert_us@oracle.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-RV92-JF3G-P8QP

Vulnerability from github – Published: 2024-10-15 21:30 – Updated: 2025-11-04 00:31

Details

Severity

4.8 (Medium)


                  
                    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-21235"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-10-15T20:15:12Z",
    "severity": "MODERATE"
  },
  "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",
  "id": "GHSA-rv92-jf3g-p8qp",
  "modified": "2025-11-04T00:31:35Z",
  "published": "2024-10-15T21:30:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21235"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2024.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-21235

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-21235

Aliases

CVE-2024-21235

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2024-21235",
    "id": "GSD-2024-21235"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-21235"
      ],
      "id": "GSD-2024-21235",
      "modified": "2023-12-13T01:21:42.594534Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-21235",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

NCSC-2024-0419

Vulnerability from csaf_ncscnl - Published: 2024-10-17 13:20 - Updated: 2024-10-17 13:20

Summary

Kwetsbaarheden verholpen in Oracle Java

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Oracle heeft kwetsbaarheden verholpen in Java SE en GraalVM.

Interpretaties: Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Manipuleren van data - Uitvoer van willekeurige code (Gebruikersrechten) - Toegang tot gevoelige gegevens Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden om onvertrouwde code te importeren en uitvoeren. Deze kwetsbaarheden vormen daarom met name een risico voor ontwikkelaars en (lokale) gebruikers met rechten om code te importeren en uitvoeren.

Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-130: Improper Handling of Length Parameter Inconsistency

CWE-195: Signed to Unsigned Conversion Error

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

CWE-190: Integer Overflow or Wraparound

CWE-416: Use After Free

CWE-122: Heap-based Buffer Overflow

CWE-789: Memory Allocation with Excessive Size Value

CVE-2023-7104

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—

CVE-2023-42950

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Known affected 13 products

Product	Identifier	Version
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-21208

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-130 - Improper Handling of Length Parameter Inconsistency

Affected products

Known affected 33 products

Product	Identifier	Version
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421-perf:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_11.0.24:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.12:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:perf:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.24:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421::::enterprise_performance:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-21210

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 23 products

Product	Identifier	Version
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421-perf:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_11.0.24:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.24:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:perf:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421::::enterprise_performance:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-21211

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Known affected 28 products

Product	Identifier	Version
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_java_se_23:::::::*`	—
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_23:::::::*`	—
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
graalvm oracle_corporation	`cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:23:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-21217

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-789 - Memory Allocation with Excessive Size Value

Affected products

Known affected 33 products

Product	Identifier	Version
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421-perf:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_11.0.24:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:perf:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.24:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421::::enterprise_performance:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-21235

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-195 - Signed to Unsigned Conversion Error

Affected products

Known affected 33 products

Product	Identifier	Version
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421-perf:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_11.0.24:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_23:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
oracle_java_se oracle_corporation	`cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:23:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:perf:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.24:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.12:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421::::enterprise_performance:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

CVE-2024-25062

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Known affected 43 products

Product	Identifier	Version
java_se oracle	`cpe:2.3:a:oracle:java_se:8u421:::::::*`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:21.3.11::::enterprise:::`	—
graalvm oracle	`cpe:2.3:a:oracle:graalvm:20.3.15::::enterprise:::`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se::::::::`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:22:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.2:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.10:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u401:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:22:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.2:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.10:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.22:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.13:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.9:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition20.3.13:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition21.3.9:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk17.0.10:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk21.0.2:::::::*`	—
database_server oracle	`cpe:2.3:a:oracle:database_server:_java_vm___23.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk22:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.11:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.3:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:22.0.1:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition20.3.14:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition21.3.10:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk17.0.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk21.0.3:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:graalvm_for_jdk22.0.1:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:11.0.23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:17.0.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:21.0.3:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:22.0.1:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:8u411:::::::*`	—

CVE-2024-36138

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected products

Known affected 13 products

Product	Identifier	Version
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:23:::::::*`	—
graalvm_for_jdk oracle	`cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_23:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:::::::*`	—
java_se oracle	`cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:::::::*`	—

References

10 references

URL	Category
https://www.oracle.com/security-alerts/cpuoct2024.html	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Oracle heeft kwetsbaarheden verholpen in Java SE en GraalVM.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipuleren van data\n- Uitvoer van willekeurige code (Gebruikersrechten)\n- Toegang tot gevoelige gegevens\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden om onvertrouwde code te importeren en uitvoeren. Deze kwetsbaarheden vormen daarom met name een risico voor ontwikkelaars en (lokale) gebruikers met rechten om code te importeren en uitvoeren.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Handling of Length Parameter Inconsistency",
        "title": "CWE-130"
      },
      {
        "category": "general",
        "text": "Signed to Unsigned Conversion Error",
        "title": "CWE-195"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
        "title": "CWE-77"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Memory Allocation with Excessive Size Value",
        "title": "CWE-789"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; hkcert; nvd; oracle; redhat",
        "url": "https://www.oracle.com/security-alerts/cpuoct2024.html"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Oracle Java",
    "tracking": {
      "current_release_date": "2024-10-17T13:20:07.759085Z",
      "id": "NCSC-2024-0419",
      "initial_release_date": "2024-10-17T13:20:07.759085Z",
      "revision_history": [
        {
          "date": "2024-10-17T13:20:07.759085Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673125",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_enterprise_edition_21.3.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673121",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673122",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673123",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_for_jdk_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673120",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_java_se_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673115",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_20.3.15:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673116",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_enterprise_edition_21.3.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673112",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673113",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673114",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_graalvm_for_jdk_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673108",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_11.0.24:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673109",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673110",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673111",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673107",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421-perf:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "oracle_java_se",
            "product": {
              "name": "oracle_java_se",
              "product_id": "CSAFPID-1673106",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:oracle_java_se:oracle_java_se_8u421:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673124",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle_corporation:graalvm:oracle_graalvm_enterprise_edition_20.3.15:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "oracle_corporation"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-912046",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.10:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1503299",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1673300",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-912045",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1503302",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.3:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1673301",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-912044",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1503306",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:22.0.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-1673304",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-912600",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition20.3.13:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm_for_jdk",
            "product": {
              "name": "graalvm_for_jdk",
              "product_id": "CSAFPID-912601",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:graalvm_enterprise_edition21.3.9:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1457455",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1672740",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673407",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm:20.3.15:*:*:*:enterprise:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1672742",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "graalvm",
            "product": {
              "name": "graalvm",
              "product_id": "CSAFPID-1673406",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:graalvm:21.3.11:*:*:*:enterprise:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "database_server",
            "product": {
              "name": "database_server",
              "product_id": "CSAFPID-1503604",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:database_server:_java_vm___23.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-550274",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912051",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:11.0.22:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503300",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:11.0.23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1673306",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:11.0.24:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912050",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:17.0.10:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503304",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:17.0.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1673303",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912049",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:21.0.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503305",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:21.0.3:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1673305",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503307",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:22.0.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912048",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:22:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1673302",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912047",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:8u401:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503308",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:8u411:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1672741",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:8u421:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1673439",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:8u421:*:*:*:enterprise_performance:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912602",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition20.3.13:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503647",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition20.3.14:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503648",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition21.3.10:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912603",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_enterprise_edition21.3.9:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912604",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk17.0.10:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503649",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk17.0.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912605",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk21.0.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503650",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk21.0.3:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1503651",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk22.0.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-912606",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:graalvm_for_jdk22:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674674",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_20.3.15:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674680",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_graalvm_enterprise_edition_21.3.11:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674673",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674675",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674672",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_graalvm_for_jdk_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674681",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_java_se_11.0.24:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674676",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_java_se_17.0.12:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674678",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_java_se_21.0.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674677",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_java_se_23:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-1674679",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:oracle_java_se_8u421:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "java_se",
            "product": {
              "name": "java_se",
              "product_id": "CSAFPID-220891",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:java_se:perf:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "oracle"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-7104",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1672741"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-7104",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-7104.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1672741"
          ]
        }
      ],
      "title": "CVE-2023-7104"
    },
    {
      "cve": "CVE-2023-42950",
      "product_status": {
        "known_affected": [
          "CSAFPID-1672741",
          "CSAFPID-1673406",
          "CSAFPID-1673407",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-42950",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42950.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1672741",
            "CSAFPID-1673406",
            "CSAFPID-1673407",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2023-42950"
    },
    {
      "cve": "CVE-2024-21208",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Length Parameter Inconsistency",
          "title": "CWE-130"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1673106",
          "CSAFPID-1673107",
          "CSAFPID-1673108",
          "CSAFPID-1673109",
          "CSAFPID-1673110",
          "CSAFPID-1673111",
          "CSAFPID-1673112",
          "CSAFPID-1673113",
          "CSAFPID-1673114",
          "CSAFPID-1673115",
          "CSAFPID-1673116",
          "CSAFPID-1673300",
          "CSAFPID-1673301",
          "CSAFPID-1673302",
          "CSAFPID-1673303",
          "CSAFPID-1673304",
          "CSAFPID-1673305",
          "CSAFPID-1672741",
          "CSAFPID-220891",
          "CSAFPID-1673306",
          "CSAFPID-1673407",
          "CSAFPID-1673406",
          "CSAFPID-1673439",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21208",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21208.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1673106",
            "CSAFPID-1673107",
            "CSAFPID-1673108",
            "CSAFPID-1673109",
            "CSAFPID-1673110",
            "CSAFPID-1673111",
            "CSAFPID-1673112",
            "CSAFPID-1673113",
            "CSAFPID-1673114",
            "CSAFPID-1673115",
            "CSAFPID-1673116",
            "CSAFPID-1673300",
            "CSAFPID-1673301",
            "CSAFPID-1673302",
            "CSAFPID-1673303",
            "CSAFPID-1673304",
            "CSAFPID-1673305",
            "CSAFPID-1672741",
            "CSAFPID-220891",
            "CSAFPID-1673306",
            "CSAFPID-1673407",
            "CSAFPID-1673406",
            "CSAFPID-1673439",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2024-21208"
    },
    {
      "cve": "CVE-2024-21210",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1673106",
          "CSAFPID-1673107",
          "CSAFPID-1673108",
          "CSAFPID-1673109",
          "CSAFPID-1673110",
          "CSAFPID-1673111",
          "CSAFPID-1673305",
          "CSAFPID-1672741",
          "CSAFPID-1673303",
          "CSAFPID-1673302",
          "CSAFPID-1673306",
          "CSAFPID-220891",
          "CSAFPID-1673439",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21210",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21210.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1673106",
            "CSAFPID-1673107",
            "CSAFPID-1673108",
            "CSAFPID-1673109",
            "CSAFPID-1673110",
            "CSAFPID-1673111",
            "CSAFPID-1673305",
            "CSAFPID-1672741",
            "CSAFPID-1673303",
            "CSAFPID-1673302",
            "CSAFPID-1673306",
            "CSAFPID-220891",
            "CSAFPID-1673439",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2024-21210"
    },
    {
      "cve": "CVE-2024-21211",
      "product_status": {
        "known_affected": [
          "CSAFPID-1673120",
          "CSAFPID-1673121",
          "CSAFPID-1673122",
          "CSAFPID-1673123",
          "CSAFPID-1673124",
          "CSAFPID-1673125",
          "CSAFPID-1673111",
          "CSAFPID-1673112",
          "CSAFPID-1673113",
          "CSAFPID-1673114",
          "CSAFPID-1673115",
          "CSAFPID-1673116",
          "CSAFPID-1673300",
          "CSAFPID-1673302",
          "CSAFPID-1673407",
          "CSAFPID-1673406",
          "CSAFPID-1673301",
          "CSAFPID-1673304",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21211",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21211.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1673120",
            "CSAFPID-1673121",
            "CSAFPID-1673122",
            "CSAFPID-1673123",
            "CSAFPID-1673124",
            "CSAFPID-1673125",
            "CSAFPID-1673111",
            "CSAFPID-1673112",
            "CSAFPID-1673113",
            "CSAFPID-1673114",
            "CSAFPID-1673115",
            "CSAFPID-1673116",
            "CSAFPID-1673300",
            "CSAFPID-1673302",
            "CSAFPID-1673407",
            "CSAFPID-1673406",
            "CSAFPID-1673301",
            "CSAFPID-1673304",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2024-21211"
    },
    {
      "cve": "CVE-2024-21217",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Memory Allocation with Excessive Size Value",
          "title": "CWE-789"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1673106",
          "CSAFPID-1673107",
          "CSAFPID-1673108",
          "CSAFPID-1673109",
          "CSAFPID-1673110",
          "CSAFPID-1673111",
          "CSAFPID-1673112",
          "CSAFPID-1673113",
          "CSAFPID-1673114",
          "CSAFPID-1673115",
          "CSAFPID-1673116",
          "CSAFPID-1673305",
          "CSAFPID-1673302",
          "CSAFPID-1673303",
          "CSAFPID-1672741",
          "CSAFPID-220891",
          "CSAFPID-1673306",
          "CSAFPID-1673300",
          "CSAFPID-1673301",
          "CSAFPID-1673304",
          "CSAFPID-1673407",
          "CSAFPID-1673406",
          "CSAFPID-1673439",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21217",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21217.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1673106",
            "CSAFPID-1673107",
            "CSAFPID-1673108",
            "CSAFPID-1673109",
            "CSAFPID-1673110",
            "CSAFPID-1673111",
            "CSAFPID-1673112",
            "CSAFPID-1673113",
            "CSAFPID-1673114",
            "CSAFPID-1673115",
            "CSAFPID-1673116",
            "CSAFPID-1673305",
            "CSAFPID-1673302",
            "CSAFPID-1673303",
            "CSAFPID-1672741",
            "CSAFPID-220891",
            "CSAFPID-1673306",
            "CSAFPID-1673300",
            "CSAFPID-1673301",
            "CSAFPID-1673304",
            "CSAFPID-1673407",
            "CSAFPID-1673406",
            "CSAFPID-1673439",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2024-21217"
    },
    {
      "cve": "CVE-2024-21235",
      "cwe": {
        "id": "CWE-195",
        "name": "Signed to Unsigned Conversion Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Signed to Unsigned Conversion Error",
          "title": "CWE-195"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1673106",
          "CSAFPID-1673107",
          "CSAFPID-1673108",
          "CSAFPID-1673109",
          "CSAFPID-1673110",
          "CSAFPID-1673111",
          "CSAFPID-1673112",
          "CSAFPID-1673113",
          "CSAFPID-1673114",
          "CSAFPID-1673115",
          "CSAFPID-1673116",
          "CSAFPID-1673305",
          "CSAFPID-1673302",
          "CSAFPID-1673301",
          "CSAFPID-1672741",
          "CSAFPID-1673300",
          "CSAFPID-220891",
          "CSAFPID-1673306",
          "CSAFPID-1673304",
          "CSAFPID-1673303",
          "CSAFPID-1673407",
          "CSAFPID-1673406",
          "CSAFPID-1673439",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21235",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21235.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1673106",
            "CSAFPID-1673107",
            "CSAFPID-1673108",
            "CSAFPID-1673109",
            "CSAFPID-1673110",
            "CSAFPID-1673111",
            "CSAFPID-1673112",
            "CSAFPID-1673113",
            "CSAFPID-1673114",
            "CSAFPID-1673115",
            "CSAFPID-1673116",
            "CSAFPID-1673305",
            "CSAFPID-1673302",
            "CSAFPID-1673301",
            "CSAFPID-1672741",
            "CSAFPID-1673300",
            "CSAFPID-220891",
            "CSAFPID-1673306",
            "CSAFPID-1673304",
            "CSAFPID-1673303",
            "CSAFPID-1673407",
            "CSAFPID-1673406",
            "CSAFPID-1673439",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681"
          ]
        }
      ],
      "title": "CVE-2024-21235"
    },
    {
      "cve": "CVE-2024-25062",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1672741",
          "CSAFPID-1673406",
          "CSAFPID-1673407",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681",
          "CSAFPID-550274",
          "CSAFPID-912044",
          "CSAFPID-912045",
          "CSAFPID-912046",
          "CSAFPID-912047",
          "CSAFPID-912048",
          "CSAFPID-912049",
          "CSAFPID-912050",
          "CSAFPID-912051",
          "CSAFPID-912600",
          "CSAFPID-912601",
          "CSAFPID-912602",
          "CSAFPID-912603",
          "CSAFPID-912604",
          "CSAFPID-912605",
          "CSAFPID-1503604",
          "CSAFPID-912606",
          "CSAFPID-1503299",
          "CSAFPID-1503302",
          "CSAFPID-1503306",
          "CSAFPID-1503647",
          "CSAFPID-1503648",
          "CSAFPID-1503649",
          "CSAFPID-1503650",
          "CSAFPID-1503651",
          "CSAFPID-1503300",
          "CSAFPID-1503304",
          "CSAFPID-1503305",
          "CSAFPID-1503307",
          "CSAFPID-1503308"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-25062",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-25062.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1672741",
            "CSAFPID-1673406",
            "CSAFPID-1673407",
            "CSAFPID-1674672",
            "CSAFPID-1674673",
            "CSAFPID-1674674",
            "CSAFPID-1674675",
            "CSAFPID-1674676",
            "CSAFPID-1674677",
            "CSAFPID-1674678",
            "CSAFPID-1674679",
            "CSAFPID-1674680",
            "CSAFPID-1674681",
            "CSAFPID-550274",
            "CSAFPID-912044",
            "CSAFPID-912045",
            "CSAFPID-912046",
            "CSAFPID-912047",
            "CSAFPID-912048",
            "CSAFPID-912049",
            "CSAFPID-912050",
            "CSAFPID-912051",
            "CSAFPID-912600",
            "CSAFPID-912601",
            "CSAFPID-912602",
            "CSAFPID-912603",
            "CSAFPID-912604",
            "CSAFPID-912605",
            "CSAFPID-1503604",
            "CSAFPID-912606",
            "CSAFPID-1503299",
            "CSAFPID-1503302",
            "CSAFPID-1503306",
            "CSAFPID-1503647",
            "CSAFPID-1503648",
            "CSAFPID-1503649",
            "CSAFPID-1503650",
            "CSAFPID-1503651",
            "CSAFPID-1503300",
            "CSAFPID-1503304",
            "CSAFPID-1503305",
            "CSAFPID-1503307",
            "CSAFPID-1503308"
          ]
        }
      ],
      "title": "CVE-2024-25062"
    },
    {
      "cve": "CVE-2024-36138",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
          "title": "CWE-77"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1673301",
          "CSAFPID-1673304",
          "CSAFPID-1673300",
          "CSAFPID-1674672",
          "CSAFPID-1674673",
          "CSAFPID-1674674",
          "CSAFPID-1674675",
          "CSAFPID-1674676",
          "CSAFPID-1674677",
          "CSAFPID-1674678",
          "CSAFPID-1674679",
          "CSAFPID-1674680",
          "CSAFPID-1674681"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-36138",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36138.json"
        }
      ],
      "title": "CVE-2024-36138"
    }
  ]
}

OPENSUSE-SU-2024:14432-1

Vulnerability from csaf_opensuse - Published: 2024-10-28 00:00 - Updated: 2024-10-28 00:00

Summary

java-11-openjdk-11.0.25.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: java-11-openjdk-11.0.25.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the java-11-openjdk-11.0.25.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-14432

CVE-2024-21208

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21210

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21217

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21235

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

14 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2024-21208/	self
https://www.suse.com/security/cve/CVE-2024-21210/	self
https://www.suse.com/security/cve/CVE-2024-21217/	self
https://www.suse.com/security/cve/CVE-2024-21235/	self
https://www.suse.com/security/cve/CVE-2024-21208	external
https://bugzilla.suse.com/1231702	external
https://www.suse.com/security/cve/CVE-2024-21210	external
https://bugzilla.suse.com/1231711	external
https://www.suse.com/security/cve/CVE-2024-21217	external
https://bugzilla.suse.com/1231716	external
https://www.suse.com/security/cve/CVE-2024-21235	external
https://bugzilla.suse.com/1231719	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-11-openjdk-11.0.25.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-11-openjdk-11.0.25.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14432",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14432-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21208 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21210 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21217 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21235 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21235/"
      }
    ],
    "title": "java-11-openjdk-11.0.25.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-10-28T00:00:00Z",
      "generator": {
        "date": "2024-10-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14432-1",
      "initial_release_date": "2024-10-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-10-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-demo-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-devel-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-headless-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-jmods-11.0.25.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.25.0-1.1.aarch64",
                "product": {
                  "name": "java-11-openjdk-src-11.0.25.0-1.1.aarch64",
                  "product_id": "java-11-openjdk-src-11.0.25.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-demo-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-devel-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-headless-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
                "product": {
                  "name": "java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
                  "product_id": "java-11-openjdk-src-11.0.25.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-demo-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-devel-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-headless-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-javadoc-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-jmods-11.0.25.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.25.0-1.1.s390x",
                "product": {
                  "name": "java-11-openjdk-src-11.0.25.0-1.1.s390x",
                  "product_id": "java-11-openjdk-src-11.0.25.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-11-openjdk-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-demo-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-devel-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-headless-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-jmods-11.0.25.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-11-openjdk-src-11.0.25.0-1.1.x86_64",
                "product": {
                  "name": "java-11-openjdk-src-11.0.25.0-1.1.x86_64",
                  "product_id": "java-11-openjdk-src-11.0.25.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-demo-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-demo-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-devel-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-devel-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-headless-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-headless-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-jmods-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.25.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64"
        },
        "product_reference": "java-11-openjdk-src-11.0.25.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.25.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le"
        },
        "product_reference": "java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.25.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x"
        },
        "product_reference": "java-11-openjdk-src-11.0.25.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-11-openjdk-src-11.0.25.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
        },
        "product_reference": "java-11-openjdk-src-11.0.25.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21208",
          "url": "https://www.suse.com/security/cve/CVE-2024-21208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231702 for CVE-2024-21208",
          "url": "https://bugzilla.suse.com/1231702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21208"
    },
    {
      "cve": "CVE-2024-21210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21210",
          "url": "https://www.suse.com/security/cve/CVE-2024-21210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231711 for CVE-2024-21210",
          "url": "https://bugzilla.suse.com/1231711"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21210"
    },
    {
      "cve": "CVE-2024-21217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21217",
          "url": "https://www.suse.com/security/cve/CVE-2024-21217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231716 for CVE-2024-21217",
          "url": "https://bugzilla.suse.com/1231716"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21217"
    },
    {
      "cve": "CVE-2024-21235",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21235"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
          "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21235",
          "url": "https://www.suse.com/security/cve/CVE-2024-21235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231719 for CVE-2024-21235",
          "url": "https://bugzilla.suse.com/1231719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-demo-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-devel-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-headless-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-javadoc-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-jmods-11.0.25.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.s390x",
            "openSUSE Tumbleweed:java-11-openjdk-src-11.0.25.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-10-28T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21235"
    }
  ]
}

OPENSUSE-SU-2024:14448-1

Vulnerability from csaf_opensuse - Published: 2024-11-01 00:00 - Updated: 2024-11-01 00:00

Summary

java-17-openjdk-17.0.13.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: java-17-openjdk-17.0.13.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the java-17-openjdk-17.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-14448

CVE-2024-21208

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21210

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21217

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21235

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

16 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://lists.opensuse.org/archives/list/security…	self
https://lists.opensuse.org/archives/list/security…	self
https://www.suse.com/security/cve/CVE-2024-21208/	self
https://www.suse.com/security/cve/CVE-2024-21210/	self
https://www.suse.com/security/cve/CVE-2024-21217/	self
https://www.suse.com/security/cve/CVE-2024-21235/	self
https://www.suse.com/security/cve/CVE-2024-21208	external
https://bugzilla.suse.com/1231702	external
https://www.suse.com/security/cve/CVE-2024-21210	external
https://bugzilla.suse.com/1231711	external
https://www.suse.com/security/cve/CVE-2024-21217	external
https://bugzilla.suse.com/1231716	external
https://www.suse.com/security/cve/CVE-2024-21235	external
https://bugzilla.suse.com/1231719	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-17-openjdk-17.0.13.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-17-openjdk-17.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14448",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14448-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2024:14448-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDGJD2OULS4GVLFGY4DZH6L7TX3XS7RK/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2024:14448-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDGJD2OULS4GVLFGY4DZH6L7TX3XS7RK/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21208 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21210 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21217 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21235 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21235/"
      }
    ],
    "title": "java-17-openjdk-17.0.13.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-11-01T00:00:00Z",
      "generator": {
        "date": "2024-11-01T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14448-1",
      "initial_release_date": "2024-11-01T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-11-01T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-demo-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-devel-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-headless-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-jmods-17.0.13.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.13.0-1.1.aarch64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.13.0-1.1.aarch64",
                  "product_id": "java-17-openjdk-src-17.0.13.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-demo-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-devel-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-headless-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
                "product": {
                  "name": "java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
                  "product_id": "java-17-openjdk-src-17.0.13.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-demo-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-devel-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-headless-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-javadoc-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-jmods-17.0.13.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.13.0-1.1.s390x",
                "product": {
                  "name": "java-17-openjdk-src-17.0.13.0-1.1.s390x",
                  "product_id": "java-17-openjdk-src-17.0.13.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-17-openjdk-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-demo-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-devel-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-headless-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-jmods-17.0.13.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-17-openjdk-src-17.0.13.0-1.1.x86_64",
                "product": {
                  "name": "java-17-openjdk-src-17.0.13.0-1.1.x86_64",
                  "product_id": "java-17-openjdk-src-17.0.13.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-demo-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-demo-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-devel-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-devel-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-headless-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-headless-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-jmods-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.13.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64"
        },
        "product_reference": "java-17-openjdk-src-17.0.13.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.13.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le"
        },
        "product_reference": "java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.13.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x"
        },
        "product_reference": "java-17-openjdk-src-17.0.13.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-17-openjdk-src-17.0.13.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
        },
        "product_reference": "java-17-openjdk-src-17.0.13.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21208",
          "url": "https://www.suse.com/security/cve/CVE-2024-21208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231702 for CVE-2024-21208",
          "url": "https://bugzilla.suse.com/1231702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21208"
    },
    {
      "cve": "CVE-2024-21210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21210",
          "url": "https://www.suse.com/security/cve/CVE-2024-21210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231711 for CVE-2024-21210",
          "url": "https://bugzilla.suse.com/1231711"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21210"
    },
    {
      "cve": "CVE-2024-21217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21217",
          "url": "https://www.suse.com/security/cve/CVE-2024-21217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231716 for CVE-2024-21217",
          "url": "https://bugzilla.suse.com/1231716"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21217"
    },
    {
      "cve": "CVE-2024-21235",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21235"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
          "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21235",
          "url": "https://www.suse.com/security/cve/CVE-2024-21235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231719 for CVE-2024-21235",
          "url": "https://bugzilla.suse.com/1231719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-demo-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-devel-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-headless-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-javadoc-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-jmods-17.0.13.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.s390x",
            "openSUSE Tumbleweed:java-17-openjdk-src-17.0.13.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21235"
    }
  ]
}

OPENSUSE-SU-2024:14449-1

Vulnerability from csaf_opensuse - Published: 2024-11-01 00:00 - Updated: 2024-11-01 00:00

Summary

java-23-openjdk-23.0.1.0-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: java-23-openjdk-23.0.1.0-1.1 on GA media

Description of the patch: These are all security issues fixed in the java-23-openjdk-23.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-14449

CVE-2024-21208

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21210

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21217

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2024-21235

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 28 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

16 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://lists.opensuse.org/archives/list/security…	self
https://lists.opensuse.org/archives/list/security…	self
https://www.suse.com/security/cve/CVE-2024-21208/	self
https://www.suse.com/security/cve/CVE-2024-21210/	self
https://www.suse.com/security/cve/CVE-2024-21217/	self
https://www.suse.com/security/cve/CVE-2024-21235/	self
https://www.suse.com/security/cve/CVE-2024-21208	external
https://bugzilla.suse.com/1231702	external
https://www.suse.com/security/cve/CVE-2024-21210	external
https://bugzilla.suse.com/1231711	external
https://www.suse.com/security/cve/CVE-2024-21217	external
https://bugzilla.suse.com/1231716	external
https://www.suse.com/security/cve/CVE-2024-21235	external
https://bugzilla.suse.com/1231719	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "java-23-openjdk-23.0.1.0-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the java-23-openjdk-23.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-14449",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_14449-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2024:14449-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYPS4PNCRNNFM3OYJLTXOMYVAPX5WDWV/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2024:14449-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYPS4PNCRNNFM3OYJLTXOMYVAPX5WDWV/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21208 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21210 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21217 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21217/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-21235 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-21235/"
      }
    ],
    "title": "java-23-openjdk-23.0.1.0-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-11-01T00:00:00Z",
      "generator": {
        "date": "2024-11-01T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:14449-1",
      "initial_release_date": "2024-11-01T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-11-01T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-23-openjdk-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-demo-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-devel-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-headless-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-jmods-23.0.1.0-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-src-23.0.1.0-1.1.aarch64",
                "product": {
                  "name": "java-23-openjdk-src-23.0.1.0-1.1.aarch64",
                  "product_id": "java-23-openjdk-src-23.0.1.0-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-23-openjdk-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-demo-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-devel-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-headless-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
                "product": {
                  "name": "java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
                  "product_id": "java-23-openjdk-src-23.0.1.0-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-23-openjdk-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-demo-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-demo-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-demo-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-devel-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-devel-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-devel-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-headless-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-headless-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-headless-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-javadoc-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-jmods-23.0.1.0-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-src-23.0.1.0-1.1.s390x",
                "product": {
                  "name": "java-23-openjdk-src-23.0.1.0-1.1.s390x",
                  "product_id": "java-23-openjdk-src-23.0.1.0-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-23-openjdk-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-demo-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-devel-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-headless-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-jmods-23.0.1.0-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-23-openjdk-src-23.0.1.0-1.1.x86_64",
                "product": {
                  "name": "java-23-openjdk-src-23.0.1.0-1.1.x86_64",
                  "product_id": "java-23-openjdk-src-23.0.1.0-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-demo-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-demo-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-demo-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-demo-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-demo-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-devel-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-devel-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-devel-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-devel-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-devel-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-headless-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-headless-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-headless-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-headless-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-headless-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-jmods-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-jmods-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-jmods-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-src-23.0.1.0-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64"
        },
        "product_reference": "java-23-openjdk-src-23.0.1.0-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-src-23.0.1.0-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le"
        },
        "product_reference": "java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-src-23.0.1.0-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x"
        },
        "product_reference": "java-23-openjdk-src-23.0.1.0-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-23-openjdk-src-23.0.1.0-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
        },
        "product_reference": "java-23-openjdk-src-23.0.1.0-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21208",
          "url": "https://www.suse.com/security/cve/CVE-2024-21208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231702 for CVE-2024-21208",
          "url": "https://bugzilla.suse.com/1231702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21208"
    },
    {
      "cve": "CVE-2024-21210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21210",
          "url": "https://www.suse.com/security/cve/CVE-2024-21210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231711 for CVE-2024-21210",
          "url": "https://bugzilla.suse.com/1231711"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21210"
    },
    {
      "cve": "CVE-2024-21217",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21217"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21217",
          "url": "https://www.suse.com/security/cve/CVE-2024-21217"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231716 for CVE-2024-21217",
          "url": "https://bugzilla.suse.com/1231716"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21217"
    },
    {
      "cve": "CVE-2024-21235",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-21235"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
          "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-21235",
          "url": "https://www.suse.com/security/cve/CVE-2024-21235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1231719 for CVE-2024-21235",
          "url": "https://bugzilla.suse.com/1231719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-demo-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-devel-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-headless-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-javadoc-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-jmods-23.0.1.0-1.1.x86_64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.aarch64",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.ppc64le",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.s390x",
            "openSUSE Tumbleweed:java-23-openjdk-src-23.0.1.0-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-11-01T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-21235"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-21235 (GCVE-0-2024-21235)

Solutions

Solutions

Tags

Sightings

Nomenclature