What is RHSA-2023:0388?

RHSA-2023:0388 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: OpenJDK 11.0.18 Security Update for Portable Linux Builds

Which CVE IDs does RHSA-2023:0388 cover?

RHSA-2023:0388 covers the following CVE IDs: CVE-2023-21835, CVE-2023-21843. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:0388?

RHSA-2023:0388 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

Which products are affected by RHSA-2023:0388?

RHSA-2023:0388 affects 1 product, including: Red Hat Build of OpenJDK 11.0.18.

RHSA-2023:0388MediumCVSS 5.3

Red Hat Security Advisory: OpenJDK 11.0.18 Security Update for Portable Linux Builds

Vendor

Red Hat Product Security

Published

January 23, 2023

Last Modified

September 19, 2026

🔗 CVE IDs covered (2)

CVE-2023-21835 →CVE-2023-21843 →

📋 Description

CVE-2023-21835 — OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) CVE-2023-21843 — OpenJDK: soundbank URL remote loading (Sound, 8293742)

🎯 Affected products1

Red Hat Build of OpenJDK 11.0.18

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/openjdk/11/html/installing_and_using_openjdk_11_on_rhel/installing-openjdk11-on-rhel8#installing-jdk11-on-rhel-using-archive_openjdk

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2023:0388
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160421
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160475
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0388.json