vulnerability

Amazon Linux 2023: CVE-2022-40433: Important priority package update for java-1.8.0-amazon-corretto (Multiple Advisories)

Severity
6
CVSS
(AV:N/AC:L/Au:M/C:N/I:N/A:C)
Published
Aug 23, 2023
Added
Feb 17, 2025
Modified
Jul 9, 2025

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: ** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.
A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::make_block_at function in OpenJDK (HotSpot VM) 8 (11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively), and may allow an attacker to cause a denial of service.

Solutions

amazon-linux-2023-upgrade-java-11-amazon-correttoamazon-linux-2023-upgrade-java-11-amazon-corretto-develamazon-linux-2023-upgrade-java-11-amazon-corretto-headlessamazon-linux-2023-upgrade-java-11-amazon-corretto-javadocamazon-linux-2023-upgrade-java-11-amazon-corretto-jmodsamazon-linux-2023-upgrade-java-1-8-0-amazon-correttoamazon-linux-2023-upgrade-java-1-8-0-amazon-corretto-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.