The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5388-1 advisory.

    It was discovered that OpenJDK incorrectly limited memory when compiling a specially crafted XPath     expression. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-21426)

    It was discovered that OpenJDK incorrectly handled converting certain object arguments into their textual     representations. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-21434)

    It was discovered that OpenJDK incorrectly validated the encoded length of certain object identifiers. An     attacker could possibly use this issue to cause a denial of service. (CVE-2022-21443)

    It was discovered that OpenJDK incorrectly validated certain paths. An attacker could possibly use this     issue to bypass the secure validation feature and expose sensitive information in XML files.
    (CVE-2022-21476)

    It was discovered that OpenJDK incorrectly parsed certain URI strings. An attacker could possibly use this     issue to make applications accept invalid of malformed URI strings. (CVE-2022-21496)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : OpenJDK vulnerabilities (USN-5388-1)

medium Nessus Plugin ID 160206

Version 1.9