OpenJDK

 CVE numbers:   

CVE‑2023‑21954

CVE‑2023‑21938

CVE‑2023‑21937

CVE‑2023‑21939

CVE‑2023‑21968

CVE‑2023‑21930

CVE‑2023‑21967

Description

Multiple vulnerabilities have been reported in OpenJDK,

which can be exploited by malicious people to disclose sensitive information,

manipulate certain data, and cause a DoS (Denial of Service).

The vulnerabilities are reported in 17.0.6 and prior, 11.0.18 and prior, and 8u362 and prior.

Oracle Java SE

CVE numbers : 

CVE‑2023‑21930

CVE‑2023‑21939

CVE‑2023‑21968

CVE‑2023‑21954

CVE‑2023‑21938

CVE‑2023‑21967

CVE‑2023‑21937

Description

Multiple vulnerabilities have been reported in Oracle Java SE,

which can be exploited by malicious people to disclose sensitive information,

manipulate certain data, and cause a DoS (Denial of Service). 

1. An error within the "JSSE" subcomponent can be exploited to disclose, update, insert, or delete certain data.
2. An error within the "JSSE" subcomponent can be exploited to cause a DoS.
3. An error within the "Hotspot" subcomponent can be exploited to disclose certain data. 

The vulnerability #3 is reported in versions 8u361, 8u361-perf, 11.0.18, and 17.0.6. 

1. An error within the "Swing" subcomponent can be exploited to update, insert, or delete certain data.
2. An error within the "Libraries" subcomponent can be exploited to update, insert, or delete certain data.
3. An error within the "Libraries" subcomponent can be exploited to update, insert, or delete certain data.
4. An error within the "Networking" subcomponent can be exploited to update, insert, or delete certain data.