USN-6527-1: openjdk-17 Ubuntu

CVSS: UnknownPublished
Published 29-11-2023Last modified 27-04-2026
Open JSON

Vulnerability summary

USN-6527-1 is a vulnerability in openjdk-17 Ubuntu with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2023-22025CVE-2023-22081

Timeline

  1. 29-11-2023
    PublishedVulnerability first disclosed.
  2. 27-04-2026
    Last modifiedVulnerability information updated.

Description

openjdk-17, openjdk-21, openjdk-lts vulnerabilities Carter Kozak discovered that OpenJDK, when compiling with AVX-512 instruction support enabled, could produce code that resulted in memory corruption in certain situations. An attacker targeting applications built in this way could possibly use this to cause a denial of service or execute arbitrary code. In Ubuntu, OpenJDK defaults to not using AVX-512 instructions. (CVE-2023-22025) It was discovered that OpenJDK did not properly perform PKIX certification path validation in certain situations. An attacker could use this to cause a denial of service. (CVE-2023-22081)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu2 products
  • openjdk-17< 17.0.9+9-1~18.04 | < 17.0.9+9-1~20.04 | < 17.0.9+9-1~22.04
  • openjdk-lts< 11.0.21+9-0ubuntu1~18.04 | < 11.0.21+9-0ubuntu1~20.04 | < 11.0.21+9-0ubuntu1~22.04

1 vendor · 2 products

References

3 links