What is RHSA-2022:4957?

RHSA-2022:4957 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: java-1.7.1-ibm security update

Which CVE IDs does RHSA-2022:4957 cover?

RHSA-2022:4957 covers the following CVE IDs: CVE-2022-21496, CVE-2021-35561, CVE-2022-21299, CVE-2022-21434, CVE-2022-21443. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:4957?

RHSA-2022:4957 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

RHSA-2022:4957MediumCVSS 5.3

Red Hat Security Advisory: java-1.7.1-ibm security update

Vendor

Red Hat Product Security

Published

June 8, 2022

Last Modified

June 25, 2026

🔗 CVE IDs covered (5)

CVE-2022-21496 →CVE-2021-35561 →CVE-2022-21299 →CVE-2022-21434 →CVE-2022-21443 →

📋 Description

CVE-2021-35561 — OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) CVE-2022-21299 — OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) CVE-2022-21434 — OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) CVE-2022-21443 — OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) CVE-2022-21496 — OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

🔗 References (8)

selfhttps://access.redhat.com/errata/RHSA-2022:4957
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2014524
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2041472
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075793
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075836
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075849
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4957.json