Details of VAR-202204-0596

ID

VAR-202204-0596

CVE

CVE-2022-21434

TITLE

Oracle Java SE Input validation error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202204-3831

DESCRIPTION

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). It exists that OpenJDK incorrectly validated the encoded length of certain object identifiers. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-21443). Solution: For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html For Red Hat OpenShift Logging 5.3, see the following instructions to apply this update: https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html 4. Bugs fixed (https://bugzilla.redhat.com/): 2004133 - CVE-2021-37136 netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data 2004135 - CVE-2021-37137 netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way 2031958 - CVE-2021-43797 netty: control chars in header names may lead to HTTP request smuggling 2045880 - CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter 2058404 - CVE-2022-0759 kubeclient: kubeconfig parsing error can lead to MITM attacks 5. JIRA issues fixed (https://issues.jboss.org/): LOG-2334 - [release-5.3] Events listing out of order in Kibana 6.8.1 LOG-2450 - http.max_header_size set to 128kb causes communication with elasticsearch to stop working LOG-2481 - EO shouldn't grant cluster-wide permission to system:serviceaccount:openshift-monitoring:prometheus-k8s when ES cluster is deployed. [openshift-logging 5.3] 6. 9) - aarch64, ppc64le, s390x, x86_64 3. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: java-11-openjdk security, bug fix, and enhancement update Advisory ID: RHSA-2022:1440-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:1440 Issue date: 2022-04-20 CVE Names: CVE-2022-21426 CVE-2022-21434 CVE-2022-21443 CVE-2022-21476 CVE-2022-21496 ==================================================================== 1. Summary: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.15.0.9). (BZ#2047531) Security Fix(es): * OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476) * OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) * OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434) * OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443) * OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2047531 - Prepare for the next quarterly OpenJDK upstream release (2022-04, 11.0.15) [rhel-7] 2075788 - CVE-2022-21426 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) 2075793 - CVE-2022-21443 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) 2075836 - CVE-2022-21434 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) 2075842 - CVE-2022-21476 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) 2075849 - CVE-2022-21496 OpenJDK: URI parsing inconsistencies (JNDI, 8278972) 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: java-11-openjdk-11.0.15.0.9-2.el7_9.src.rpm x86_64: java-11-openjdk-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: java-11-openjdk-11.0.15.0.9-2.el7_9.src.rpm x86_64: java-11-openjdk-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: java-11-openjdk-11.0.15.0.9-2.el7_9.src.rpm ppc64: java-11-openjdk-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.ppc64.rpm ppc64le: java-11-openjdk-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.ppc64le.rpm s390x: java-11-openjdk-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.s390x.rpm x86_64: java-11-openjdk-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.ppc64.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.ppc64.rpm ppc64le: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.ppc64le.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.ppc64le.rpm s390x: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.s390x.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.s390x.rpm x86_64: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: java-11-openjdk-11.0.15.0.9-2.el7_9.src.rpm x86_64: java-11-openjdk-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-devel-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-headless-11.0.15.0.9-2.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-debuginfo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-demo-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-jmods-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-src-11.0.15.0.9-2.el7_9.x86_64.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.i686.rpm java-11-openjdk-static-libs-11.0.15.0.9-2.el7_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-21426 https://access.redhat.com/security/cve/CVE-2022-21434 https://access.redhat.com/security/cve/CVE-2022-21443 https://access.redhat.com/security/cve/CVE-2022-21476 https://access.redhat.com/security/cve/CVE-2022-21496 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYmAx+NzjgjWX9erEAQjH/Q/+LWdIlvKxvVPZ5cWaFA2ZTaQrMfJiad6H 3lauUSupgikqAiHVhFviBTMlNpLg38lrt2gMgjDFodSi9SEUT9qp0ig1bC9FBqGt XifysNiTI6pJCIZiQDUlIsguakgJYv8oiuAPfBYZafV5LrVbgQXRBSlybpghXd87 21DymPq84hWR32lFNgQscDUI5MBmmMjn69Ta3iiKi51q5apNAggAyW6XzsA3JJQL M3/j0i1HcY4ONTip0M0lWxfneS/JTm6PO3NODBlIbHIBjMH2Ve6hBAdv2k67VgAm MGzhhwufwvbtq1WGvXZCxLCsRL092PSSoar3Mu3bnT7Aop2iQf28D9Fivk+IS2Ra n6/+Q6qwvonIbhMKg1DoPITivbbJyZJ47LRq7uc5zhx62z5ipVhx0PJU0UhGifRX ZHtOeLAWh+yob2cOs/5U2lydQ5whdJVeWWI8uC7jW+4N21OEVtpPU4yZezB5YTPl N4549Z8EcOOAOr4EM0v74Kv9Frrw6LoVKcC9nhCc/jLTlchYCl7p5LcQs+4xSkNO 12mg+dQAibL4txGMGkJVJBc0jIhN8CWuLPORnvjbfAQ9D6/esWGNBMrZZmbbqn5y 5d2CgprQx3Rk+4kI66emdZClZYB4P6tykCpPlFAVNtHbGcHFDHLBtchu5unRBbyw gxhzoRdL38A=hHHS -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce . For further information, refer to the release notes linked to in the References section. This update rectifies this situation and again uses the database provided in the JDK bundle. Users may also now configure the cacerts database in the java.security file using the property security.systemCACerts. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied

Trust: 1.71

sources: NVD: CVE-2022-21434 // VULHUB: VHN-407047 // VULMON: CVE-2022-21434 // PACKETSTORM: 167140 // PACKETSTORM: 167122 // PACKETSTORM: 167388 // PACKETSTORM: 167385 // PACKETSTORM: 166794 // PACKETSTORM: 166898 // PACKETSTORM: 166901

AFFECTED PRODUCTS

vendor:	netapp	model:	e-series santricity os controller	scope:	gte	version:	11.0.0	Trust: 1.0
vendor:	netapp	model:	e-series santricity storage manager	scope:	eq	version:	-	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	9.0	Trust: 1.0
vendor:	netapp	model:	cloud secure agent	scope:	eq	version:	-	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	6.45	Trust: 1.0
vendor:	oracle	model:	graalvm	scope:	eq	version:	22.0.0.2	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	11.0.14	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	11.0	Trust: 1.0
vendor:	netapp	model:	active iq unified manager	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	solidfire \& hci management node	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	7-mode transition tool	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	oncommand insight	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	18	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	1.8.0	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	11.54	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	1.7.0	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	18.28	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	17.0.2	Trust: 1.0
vendor:	oracle	model:	graalvm	scope:	eq	version:	20.3.5	Trust: 1.0
vendor:	netapp	model:	e-series santricity os controller	scope:	lte	version:	11.70.1	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	13.46	Trust: 1.0
vendor:	netapp	model:	solidfire\, enterprise sds \& hci storage node	scope:	eq	version:	-	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	8.60	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	10.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	11.0.14	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	1.8.0	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	1.7.0	Trust: 1.0
vendor:	netapp	model:	cloud insights acquisition unit	scope:	eq	version:	-	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	7.52	Trust: 1.0
vendor:	oracle	model:	jdk	scope:	eq	version:	17.0.2	Trust: 1.0
vendor:	netapp	model:	hci compute node	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	e-series santricity web services	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	santricity unified manager	scope:	eq	version:	-	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	15.38	Trust: 1.0
vendor:	oracle	model:	jre	scope:	eq	version:	18	Trust: 1.0
vendor:	azul	model:	zulu	scope:	eq	version:	17.32	Trust: 1.0
vendor:	oracle	model:	graalvm	scope:	eq	version:	21.3.1	Trust: 1.0

sources: NVD: CVE-2022-21434

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-21434
value:	MEDIUM
Trust: 1.0
secalert_us@oracle.com:	CVE-2022-21434
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-202204-3831
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-407047
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2022-21434
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2022-21434
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-407047
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

secalert_us@oracle.com:	CVE-2022-21434
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-407047 // VULMON: CVE-2022-21434 // CNNVD: CNNVD-202204-3831 // NVD: CVE-2022-21434 // NVD: CVE-2022-21434

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2022-21434

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202204-3831

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202204-3831

PATCH

title:	Oracle Java SE Enter the fix for the verification error vulnerability	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=190922	Trust: 0.6
title:	Arch Linux Issues:	url:	https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2022-21434	Trust: 0.1
title:	Ubuntu Security Notice: USN-5388-1: OpenJDK vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5388-1	Trust: 0.1
title:	Red Hat: Moderate: java-1.8.0-ibm security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20225837 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: java-1.8.0-ibm security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20224959 - Security Advisory	Trust: 0.1
title:	Ubuntu Security Notice: USN-5388-2: OpenJDK vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5388-2	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221487 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221442 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221440 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221488 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 8u332 Windows builds release and security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221492 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221441 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 11.0.15 security update for Portable Linux Builds	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221435 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221444 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 11.0.15 security update for Windows Builds	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221439 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 8u332 security update for Portable Linux Builds	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221438 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221490 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221491 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221489 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: java-1.7.1-ibm security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20224957 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221728 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-1.8.0-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222137 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-11-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221443 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 17.0.3 security update for Windows Builds	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221437 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-17-openjdk security and bug fix update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221445 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: OpenJDK 17.0.3 security update for Portable Linux Builds	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221436 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: java-17-openjdk security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221729 - Security Advisory	Trust: 0.1
title:	Debian Security Advisories: DSA-5131-1 openjdk-11 -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=5c8840c405cfcf2d530316add80d95b7	Trust: 0.1
title:	Debian Security Advisories: DSA-5128-1 openjdk-17 -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=c35e0aa61b24f917b1354b5d6ba66425	Trust: 0.1
title:	Red Hat: Moderate: OpenShift Container Platform 4.8.41 bug fix and security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222272 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Cryostat 2.1.0: new Cryostat on RHEL 8 container images	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221679 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: security update for rh-sso-7/sso75-openshift-rhel8 container image	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221713 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: OpenShift Container Platform 4.7.50 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221699 - Security Advisory	Trust: 0.1
title:	Ubuntu Security Notice: USN-5546-2: OpenJDK 8 vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5546-2	Trust: 0.1
title:	Ubuntu Security Notice: USN-5546-1: OpenJDK vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-5546-1	Trust: 0.1
title:	Red Hat: Moderate: OpenShift Container Platform 3.11.705 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222281 - Security Advisory	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1791	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1791	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1790	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1790	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1778	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1778	Trust: 0.1
title:	Amazon Linux 2: ALAS2CORRETTO8-2022-002	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2CORRETTO8-2022-002	Trust: 0.1
title:	Red Hat: Moderate: Red Hat OpenShift Logging Security and Bug update Release 5.4.1	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222216 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Openshift Logging Security and Bug update Release (5.2.10)	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222218 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Red Hat OpenShift Logging Security and Bug update Release 5.3.7	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20222217 - Security Advisory	Trust: 0.1
title:	Hitachi Security Advisories: Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center	url:	https://vulmon.com/vendoradvisory?qidtp=hitachi_security_advisories&qid=hitachi-sec-2022-113	Trust: 0.1
title:	Hitachi Security Advisories: Multiple Vulnerabilities in Cosminexus	url:	https://vulmon.com/vendoradvisory?qidtp=hitachi_security_advisories&qid=hitachi-sec-2022-112	Trust: 0.1
title:	Amazon Linux 2: ALAS2JAVA-OPENJDK11-2022-002	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2JAVA-OPENJDK11-2022-002	Trust: 0.1
title:	Red Hat: Moderate: OpenShift Container Platform 4.6.57 security and extras update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221622 - Security Advisory	Trust: 0.1
title:	Red Hat: Low: Release of OpenShift Serverless Version 1.22.0	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20221747 - Security Advisory	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2022-1633	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2022-1633	Trust: 0.1
title:	Amazon Linux AMI: ALAS-2022-1631	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2022-1631	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2022-1835	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2022-1835	Trust: 0.1
title:	CVE-2022-XXXX	url:	https://github.com/AlphabugX/CVE-2022-23305	Trust: 0.1
title:	CVE-2022-XXXX	url:	https://github.com/AlphabugX/CVE-2022-RCE	Trust: 0.1

sources: VULMON: CVE-2022-21434 // CNNVD: CNNVD-202204-3831

EXTERNAL IDS

db:	NVD	id:	CVE-2022-21434	Trust: 2.5
db:	PACKETSTORM	id:	167385	Trust: 0.8
db:	PACKETSTORM	id:	167327	Trust: 0.7
db:	PACKETSTORM	id:	167008	Trust: 0.7
db:	PACKETSTORM	id:	167980	Trust: 0.7
db:	PACKETSTORM	id:	166967	Trust: 0.7
db:	PACKETSTORM	id:	167088	Trust: 0.7
db:	PACKETSTORM	id:	167164	Trust: 0.7
db:	PACKETSTORM	id:	167142	Trust: 0.7
db:	PACKETSTORM	id:	167942	Trust: 0.7
db:	PACKETSTORM	id:	167454	Trust: 0.7
db:	PACKETSTORM	id:	167271	Trust: 0.7
db:	PACKETSTORM	id:	167979	Trust: 0.7
db:	PACKETSTORM	id:	166954	Trust: 0.7
db:	CS-HELP	id:	SB2022051742	Trust: 0.6
db:	CS-HELP	id:	SB2022070412	Trust: 0.6
db:	CS-HELP	id:	SB2022041944	Trust: 0.6
db:	CS-HELP	id:	SB2022072540	Trust: 0.6
db:	CS-HELP	id:	SB2022051325	Trust: 0.6
db:	CS-HELP	id:	SB2022051235	Trust: 0.6
db:	CS-HELP	id:	SB2022042559	Trust: 0.6
db:	CS-HELP	id:	SB2022070707	Trust: 0.6
db:	CS-HELP	id:	SB2022071332	Trust: 0.6
db:	CS-HELP	id:	SB2022053122	Trust: 0.6
db:	CS-HELP	id:	SB2022072010	Trust: 0.6
db:	CS-HELP	id:	SB2022042139	Trust: 0.6
db:	CS-HELP	id:	SB2022050504	Trust: 0.6
db:	CS-HELP	id:	SB2022042105	Trust: 0.6
db:	CS-HELP	id:	SB2022050424	Trust: 0.6
db:	CS-HELP	id:	SB2022060921	Trust: 0.6
db:	CS-HELP	id:	SB2022042620	Trust: 0.6
db:	PACKETSTORM	id:	166804	Trust: 0.6
db:	PACKETSTORM	id:	166835	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3583	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1840	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.2851	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.1808	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.2373	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3440	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.2360	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3824	Trust: 0.6
db:	AUSCERT	id:	ESB-2022.3865	Trust: 0.6
db:	CNNVD	id:	CNNVD-202204-3831	Trust: 0.6
db:	PACKETSTORM	id:	167388	Trust: 0.2
db:	PACKETSTORM	id:	167122	Trust: 0.2
db:	PACKETSTORM	id:	167140	Trust: 0.2
db:	PACKETSTORM	id:	167456	Trust: 0.1
db:	PACKETSTORM	id:	167378	Trust: 0.1
db:	VULHUB	id:	VHN-407047	Trust: 0.1
db:	VULMON	id:	CVE-2022-21434	Trust: 0.1
db:	PACKETSTORM	id:	166794	Trust: 0.1
db:	PACKETSTORM	id:	166898	Trust: 0.1
db:	PACKETSTORM	id:	166901	Trust: 0.1

sources: VULHUB: VHN-407047 // VULMON: CVE-2022-21434 // PACKETSTORM: 167140 // PACKETSTORM: 167122 // PACKETSTORM: 167388 // PACKETSTORM: 167385 // PACKETSTORM: 166794 // PACKETSTORM: 166898 // PACKETSTORM: 166901 // CNNVD: CNNVD-202204-3831 // NVD: CVE-2022-21434

REFERENCES

url:	https://www.oracle.com/security-alerts/cpuapr2022.html	Trust: 2.4
url:	https://security.netapp.com/advisory/ntap-20220429-0006/	Trust: 1.8
url:	https://www.debian.org/security/2022/dsa-5128	Trust: 1.8
url:	https://www.debian.org/security/2022/dsa-5131	Trust: 1.8
url:	https://lists.debian.org/debian-lts-announce/2022/05/msg00017.html	Trust: 1.8
url:	https://access.redhat.com/security/cve/cve-2022-21434	Trust: 1.3
url:	https://security.netapp.com/advisory/ntap-20240621-0006/	Trust: 1.0
url:	https://access.redhat.com/security/cve/cve-2022-21426	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21443	Trust: 0.7
url:	https://access.redhat.com/security/cve/cve-2022-21476	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21496	Trust: 0.7
url:	https://access.redhat.com/security/team/contact/	Trust: 0.7
url:	https://access.redhat.com/security/cve/cve-2022-21496	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21434	Trust: 0.7
url:	https://access.redhat.com/security/cve/cve-2022-21443	Trust: 0.7
url:	https://bugzilla.redhat.com/):	Trust: 0.7
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21426	Trust: 0.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21476	Trust: 0.7
url:	https://www.cybersecurity-help.cz/vdb/sb2022050504	Trust: 0.6
url:	https://packetstormsecurity.com/files/166835/ubuntu-security-notice-usn-5388-2.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042620	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022060921	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042105	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022041944	Trust: 0.6
url:	https://packetstormsecurity.com/files/167980/ubuntu-security-notice-usn-5546-1.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/166804/red-hat-security-advisory-2022-1443-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1808	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070707	Trust: 0.6
url:	https://packetstormsecurity.com/files/167088/red-hat-security-advisory-2022-1679-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022053122	Trust: 0.6
url:	https://packetstormsecurity.com/files/167942/red-hat-security-advisory-2022-5837-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.2373	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3440	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3583	Trust: 0.6
url:	https://cxsecurity.com/cveshow/cve-2022-21434/	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022051742	Trust: 0.6
url:	https://packetstormsecurity.com/files/167271/red-hat-security-advisory-2022-2272-01.html	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.2851	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022051325	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3865	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022071332	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.1840	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.3824	Trust: 0.6
url:	https://packetstormsecurity.com/files/167142/red-hat-security-advisory-2022-2216-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/166967/red-hat-security-advisory-2022-1713-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb20220720108	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022072540	Trust: 0.6
url:	https://packetstormsecurity.com/files/167327/red-hat-security-advisory-2022-2281-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/167164/red-hat-security-advisory-2022-1699-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042559	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022042139	Trust: 0.6
url:	https://packetstormsecurity.com/files/166954/red-hat-security-advisory-2022-1622-01.html	Trust: 0.6
url:	https://vigilance.fr/vulnerability/oracle-java-vulnerabilities-of-april-2022-38106	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.2360	Trust: 0.6
url:	https://packetstormsecurity.com/files/167385/red-hat-security-advisory-2022-1729-01.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/167979/ubuntu-security-notice-usn-5546-2.html	Trust: 0.6
url:	https://packetstormsecurity.com/files/167008/red-hat-security-advisory-2022-1747-01.html	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022051235	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022070412	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2022050424	Trust: 0.6
url:	https://packetstormsecurity.com/files/167454/red-hat-security-advisory-2022-4957-01.html	Trust: 0.6
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.5
url:	https://access.redhat.com/security/team/key/	Trust: 0.3
url:	https://access.redhat.com/articles/11258	Trust: 0.3
url:	https://issues.jboss.org/):	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-43797	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0759	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1154	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-37137	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-1154	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-43797	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-21698	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25636	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-25636	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-37137	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-4028	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2021-37136	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0778	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2018-25032	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2018-25032	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-4028	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2021-37136	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-0778	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-0759	Trust: 0.2
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21698	Trust: 0.2
url:	https://docs.openshift.com/container-platform/4.7/logging/cluster-logging-upgrading.html	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-1271	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1271	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-21449	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2022-21449	Trust: 0.2
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://security.archlinux.org/cve-2022-21434	Trust: 0.1
url:	https://ubuntu.com/security/notices/usn-5388-1	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:2218	Trust: 0.1
url:	https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html	Trust: 0.1
url:	https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:2217	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1728	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1729	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1440	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1438	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/openjdk/8/html/installing_and_using_openjdk_8_for_rhel/assembly_installing-openjdk-8-on-red-hat-enterprise-linux_openjdk#installing-jdk11-on-rhel-using-archive_openjdk	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2022:1436	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/openjdk/17/html/installing_and_using_openjdk_17_on_rhel/installing-openjdk11-on-rhel8_openjdk#installing-jdk11-on-rhel-using-archive_openjdk	Trust: 0.1

CREDITS

Red Hat

Trust: 0.7

sources: PACKETSTORM: 167140 // PACKETSTORM: 167122 // PACKETSTORM: 167388 // PACKETSTORM: 167385 // PACKETSTORM: 166794 // PACKETSTORM: 166898 // PACKETSTORM: 166901

SOURCES

db:	VULHUB	id:	VHN-407047
db:	VULMON	id:	CVE-2022-21434
db:	PACKETSTORM	id:	167140
db:	PACKETSTORM	id:	167122
db:	PACKETSTORM	id:	167388
db:	PACKETSTORM	id:	167385
db:	PACKETSTORM	id:	166794
db:	PACKETSTORM	id:	166898
db:	PACKETSTORM	id:	166901
db:	CNNVD	id:	CNNVD-202204-3831
db:	NVD	id:	CVE-2022-21434

LAST UPDATE DATE

2026-08-28T20:24:12.600000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-407047	date:	2022-07-28T00:00:00
db:	VULMON	id:	CVE-2022-21434	date:	2023-04-27T00:00:00
db:	CNNVD	id:	CNNVD-202204-3831	date:	2022-12-09T00:00:00
db:	NVD	id:	CVE-2022-21434	date:	2026-06-17T04:26:15.493

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-407047	date:	2022-04-19T00:00:00
db:	VULMON	id:	CVE-2022-21434	date:	2022-04-19T00:00:00
db:	PACKETSTORM	id:	167140	date:	2022-05-12T15:53:27
db:	PACKETSTORM	id:	167122	date:	2022-05-12T15:38:35
db:	PACKETSTORM	id:	167388	date:	2022-06-03T15:59:53
db:	PACKETSTORM	id:	167385	date:	2022-06-03T15:56:14
db:	PACKETSTORM	id:	166794	date:	2022-04-21T15:08:25
db:	PACKETSTORM	id:	166898	date:	2022-04-29T12:36:12
db:	PACKETSTORM	id:	166901	date:	2022-04-29T12:36:50
db:	CNNVD	id:	CNNVD-202204-3831	date:	2022-04-19T00:00:00
db:	NVD	id:	CVE-2022-21434	date:	2022-04-19T21:15:15.387