Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | — | Upgrade to the latest version of AdoptOpenJDK | Jan 26, 2023 | Jan 18, 2023 |
| Alma_linux | — | Upgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-accessibility-fastdebug | Feb 13, 2023 | Jan 18, 2023 |
| Alpine Linux | — | Upgrade openjdk8 | Aug 22, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-amazon-correttoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibility-debug | Jan 24, 2023 | Jan 18, 2023 |
| Amazon_linux | — | Upgrade java-1.8.0-openjdk | Mar 7, 2023 | Jan 18, 2023 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.67.0.22 (JDK 8u361-b05, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.53.0.12 (JDK 6b153, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 7 installer 7.59.0.18 (JDK 7u371-b03, quarterly CPU) — Azul Legacy Production Support | Jan 25, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-devel | Jan 27, 2023 | Jan 18, 2023 |
| Debian | — | Upgrade openjdk-21 | Jul 27, 2026 | Jul 27, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jun 26, 2026 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade dev-java/openjdk-bin.Upgrade dev-java/openjdk.Upgrade dev-java/openjdk-jre-bin.Upgrade dev-java/icedtea-bin.Upgrade dev-java/icedtea. | Jan 18, 2024 | Jan 18, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-devel | Jun 9, 2023 | Jan 18, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk | Apr 13, 2023 | Jan 18, 2023 |
| Ibm Aix | — | Apply the fix or workaround for java_may2023_advisory | Jul 27, 2023 | Jan 18, 2023 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.17Upgrade IBM Java to version 8.0.8.0 | Jan 17, 2023 | Jan 17, 2023 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jan 17, 2023 | Jan 17, 2023 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Mar 24, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-accessibilityUpgrade graalvm22-ce-11-ruby-develUpgrade graalvm22-ce-11-wasmUpgrade graalvm22-ce-17-pythonUpgrade graalvm22-ce-17-jdkUpgrade graalvm22-ce-17-polyglotUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade graalvm22-ce-11-espressoUpgrade graalvm22-ce-11-polyglotUpgrade graalvm22-ce-17-javascriptUpgrade graalvm22-ce-17-nodejs-develUpgrade graalvm22-ce-11-develUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade graalvm22-ce-11-native-imageUpgrade graalvm22-ce-17-develUpgrade graalvm22-ce-17-libpolyglotUpgrade java-1.8.0-openjdk-demoUpgrade graalvm22-ce-11-libpolyglotUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade graalvm22-ce-11-espresso-llvmUpgrade graalvm22-ce-11-pythonUpgrade graalvm22-ce-17-python-develUpgrade graalvm22-ce-11-native-image-llvm-backendUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade graalvm22-ce-11-python-develUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade graalvm22-ce-17-llvmUpgrade graalvm22-ce-17-rubyUpgrade graalvm22-ce-17-native-image-llvm-backendUpgrade graalvm22-ce-17-llvm-toolchainUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade graalvm22-ce-11-fastrUpgrade graalvm22-ce-17-espressoUpgrade graalvm22-ce-17-espresso-llvmUpgrade graalvm22-ce-17-toolsUpgrade graalvm22-ce-11-rubyUpgrade graalvm22-ce-11-llvmUpgrade java-1.8.0-openjdk-srcUpgrade graalvm22-ce-17-ruby-develUpgrade graalvm22-ce-17-nodejsUpgrade graalvm22-ce-11-nodejs-develUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdkUpgrade graalvm22-ce-17-fastrUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade graalvm22-ce-11-llvm-toolchainUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade graalvm22-ce-17Upgrade graalvm22-ce-11-nodejsUpgrade graalvm22-ce-11-javascriptUpgrade graalvm22-ce-11Upgrade java-1.8.0-openjdk-src-slowdebugUpgrade graalvm22-ce-17-wasmUpgrade graalvm22-ce-17-native-imageUpgrade graalvm22-ce-11-toolsUpgrade graalvm22-ce-11-jdkUpgrade java-1.8.0-openjdk-headless | Jan 25, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebugNo solution existsUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-ibmUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-src-fastdebug | Jan 24, 2023 | Jan 18, 2023 |
| Rocky_linux | — | Upgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-src | Mar 12, 2024 | Jan 18, 2023 |
| Suse | — | Upgrade java-1_8_0-openj9-headlessUpgrade java-1_8_0-openjdk-accessibilityUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-openj9-srcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-openj9-accessibilityUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_8_0-openjdkUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openj9-javadocUpgrade java-1_8_0-openj9Upgrade java-1_8_0-ibmUpgrade java-1_8_0-openj9-demoUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-openj9-devel | Feb 17, 2023 | Jan 18, 2023 |
| Ubuntu | — | Upgrade openjdk-8-jreUpgrade openjdk-8-jre-headlessUpgrade openjdk-8-jre-zeroUpgrade openjdk-8-jdk | Mar 22, 2023 | Jan 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub