Read Time:28 Second

Juraj Somorovsky, Marcel Maehren, Nurullah Erinola, and Robert Merget
discovered that the DTLS implementation in the JSSE subsystem of OpenJDK
did not properly restrict handshake initiation requests from clients. A
remote attacker could possibly use this to cause a denial of service.
(CVE-2023-21835)

Markus Loewe discovered that the Java Sound subsystem in OpenJDK did not
properly validate the origin of a Soundbank. An attacker could use this to
specially craft an untrusted Java application or applet that could load a
Soundbank from an attacker controlled remote URL. (CVE-2023-21843)

Read More

More Stories

chromium-134.0.6998.117-1.el9

FEDORA-EPEL-2025-3bca78a2e4 Packages in this update: chromium-134.0.6998.117-1.el9 Update description: Update to 134.0.6998.117 * Critical CVE-2025-2476: Use after free in Lens Read...