CVE-2022-21619

low

Published 2022-10-18 · Modified 2023-09-15

CVSS v3

3.7

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2

—

VIR risk

3.7

Description

Moderate: java-11-openjdk security and bug fix update

Predictions

Exploit likelihood

47%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-7013.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-6999.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7012.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7012

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7000.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133817

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133776

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7000

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-7007.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7006.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133769

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133765

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133753

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133745

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7006

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-21619

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7007

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:6999

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7013

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7006

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7000

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7012

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-21619.html

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — https://www.oracle.com/security-alerts/cpuoct2022.html

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — https://www.oracle.com/security-alerts/cpuoct2022.html

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:7013

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:7007

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:6999

OS impact

OS	Version	Status	Fixed in
rhel	9	fixed
sles		affected
rocky	8	fixed
rocky	9	fixed
fedora	35	affected
fedora	36	affected
debian	bookworm	fixed	`17.0.5+8-1`
debian	bullseye	fixed	`11.0.18+10-1~deb11u1`
debian	sid	fixed	`11.0.17+8-1`

Application impact

Vendor	Product	Versions	Fixed
oracle	graalvm	`20.3.7`
oracle	graalvm	`21.3.3`
oracle	graalvm	`22.2.0`
oracle	jdk	`1.8.0`
oracle	jdk	`11.0.16.1`
oracle	jdk	`19`
oracle	jre	`1.8.0`
oracle	jre	`11.0.16.1`
oracle	jre	`17.0.4.1`
oracle	jre	`19`
netapp	7-mode_transition_tool	`-`
netapp	cloud_insights_acquisition_unit	`-`
netapp	cloud_secure_agent	`-`
netapp	e-series_santricity_os_controller	`{"startIncluding":"11.0","endExcluding":"11.70.2"}`	`11.70.2`
netapp	e-series_santricity_os_controller	`11.70.2`
netapp	e-series_santricity_storage_manager	`-`
netapp	e-series_santricity_unified_manager	`-`
netapp	oncommand_insight	`-`
netapp	oncommand_workflow_automation	`-`
netapp	santricity_storage_plugin	`-`
netapp	santricity_web_services_proxy	`-`
azul	zulu	`7.56`
azul	zulu	`8.64`
azul	zulu	`11.58`
azul	zulu	`13.50`
azul	zulu	`15.42`
azul	zulu	`17.36`
azul	zulu	`19.28`
oracle	graalvm	`20.3.7`
oracle	graalvm	`21.3.3`
oracle	graalvm	`22.2.0`
oracle	jdk	`1.8.0`
oracle	jdk	`11.0.16.1`
oracle	jdk	`17.0.4.1`
oracle	jdk	`19`
oracle	jre	`1.8.0`
oracle	jre	`11.0.16.1`
oracle	jre	`17.0.4.1`
oracle	jre	`19`
netapp	7-mode_transition_tool	`-`
netapp	cloud_insights_acquisition_unit	`-`
netapp	cloud_secure_agent	`-`
netapp	e-series_santricity_os_controller	`{"startIncluding":"11.0","endExcluding":"11.70.2"}`	`11.70.2`
netapp	e-series_santricity_os_controller	`11.70.2`
netapp	e-series_santricity_storage_manager	`-`
netapp	e-series_santricity_unified_manager	`-`
netapp	oncommand_insight	`-`
netapp	oncommand_workflow_automation	`-`
netapp	santricity_storage_plugin	`-`
netapp	santricity_web_services_proxy	`-`
azul	zulu	`7.56`
azul	zulu	`8.64`
azul	zulu	`11.58`
azul	zulu	`13.50`
azul	zulu	`15.42`
azul	zulu	`17.36`
azul	zulu	`19.28`

References

CWEs

CWE-284

Verify integrity in audit chain (admin only). AS-IS.