{ "affected": [ { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.16", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.17", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.18", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.19", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.20", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.21", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.22", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.23", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.24", "name": "openjdk11", "purl": "pkg:apk/alpine/openjdk11?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "11.0.22_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.16", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.17", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.18", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.19", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.20", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.21", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.22", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.23", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.24", "name": "openjdk17", "purl": "pkg:apk/alpine/openjdk17?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "17.0.10_p7-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.19", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.20", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.21", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.22", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.23", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.24", "name": "openjdk21", "purl": "pkg:apk/alpine/openjdk21?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "21.0.2_p13-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.18", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.19", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.20", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.21", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.22", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.23", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] }, { "ecosystem_specific": {}, "package": { "ecosystem": "Alpine:v3.24", "name": "openjdk8", "purl": "pkg:apk/alpine/openjdk8?arch=source" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "8.402.06-r0" } ], "type": "ECOSYSTEM" } ] } ], "details": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).", "id": "ALPINE-CVE-2024-20919", "modified": "2026-11-03T06:17:59.689923041Z", "published": "2024-02-17T02:15:46.770Z", "references": [ { "type": "ADVISORY", "url": "https://security.alpinelinux.org/vuln/CVE-2024-20919" } ], "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "type": "CVSS_V3" } ], "upstream": [ "CVE-2024-20919" ] }