CVE-2022-39399

low
Published 2022-10-18 · Modified 2023-09-15
CVSS v3
3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v2
VIR risk
3.7

Description

Moderate: java-11-openjdk security and bug fix update

Predictions

Exploit likelihood
47%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-7013.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-6999.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7012.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7012

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7000.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133817

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133776

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133769

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133765

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133753

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2133745

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7000

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-39399

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:6999

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7013

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7000

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7012

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-39399.html

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — https://www.oracle.com/security-alerts/cpuoct2022.html

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — https://www.oracle.com/security-alerts/cpuoct2022.html

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:7013

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:6999

OS impact

OSVersionStatusFixed in
redhat rhel9fixed
suse slesaffected
rockylinux rocky8fixed
rockylinux rocky9fixed
fedora fedora35affected
fedora fedora36affected
debian debianbullseyefixed11.0.18+10-1~deb11u1
debian debiansidfixed11.0.17+8-1
debian debianbookwormfixed17.0.5+8-1

Application impact

VendorProductVersionsFixed
oraclegraalvm20.3.7
oraclegraalvm21.3.3
oraclegraalvm22.2.0
oraclejdk11.0.16.1
oraclejdk17.0.4.1
oraclejdk19
oraclejre11.0.16.1
oraclejre17.0.4.1
oraclejre19
netapp7-mode_transition_tool-
netappcloud_insights_acquisition_unit-
netappcloud_secure_agent-
netappe-series_santricity_os_controller{"startIncluding":"11.0","endIncluding":"11.70.2"}
netappe-series_santricity_storage_manager-
netappe-series_santricity_unified_manager-
netapponcommand_insight-
netapponcommand_workflow_automation-
netappsantricity_storage_plugin-
netappsantricity_web_services_proxy-
azulzulu11.58
azulzulu13.50
azulzulu15.42
azulzulu17.36
azulzulu19.28
oraclegraalvm21.3.3
oraclejdk11.0.16.1
oraclejdk17.0.4.1
oraclejdk19
oraclejre11.0.16.1
oraclejre17.0.4.1
oraclejre19
netapp7-mode_transition_tool-
netappcloud_insights_acquisition_unit-
netappcloud_secure_agent-
netappe-series_santricity_os_controller{"startIncluding":"11.0","endIncluding":"11.70.2"}
netappe-series_santricity_storage_manager-
netappe-series_santricity_unified_manager-
netapponcommand_insight-
netapponcommand_workflow_automation-
netappsantricity_web_services_proxy-
azulzulu11.58
azulzulu15.42
azulzulu17.36

References

CWEs

CWE-284

Verify integrity in audit chain (admin only). AS-IS.