USN-7255-1
- Source
- https://ubuntu.com/security/notices/USN-7255-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7255-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-7255-1
- Related
- Published
- 2025-02-05T04:28:09.237031Z
- Modified
- 2025-02-05T04:28:09.237031Z
- Summary
- openjdk-23 vulnerability
- Details
-
It was discovered that the Hotspot component of OpenJDK 23 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
- References
Affected packages
Ubuntu:24.10 / openjdk-23
Package
- Name
- openjdk-23
- Purl
- pkg:deb/ubuntu/openjdk-23@23.0.2+7-1ubuntu1~24.10?arch=source&distro=oracular
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed23.0.2+7-1ubuntu1~24.10
Affected versions
Other
23~20ea-1
23~28ea-1ubuntu1
23~33ea-1
23~34ea-1
23~36ea-1
23~37ea-1
23+37-1
23.*
23.0.1+11-1ubuntu1~24.10.1
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-dbg"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-demo"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-doc"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-jdk"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-jdk-headless"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-jre"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-jre-headless"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-jre-zero"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-source"
},
{
"binary_version": "23.0.2+7-1ubuntu1~24.10",
"binary_name": "openjdk-23-testsupport"
}
]
}