CVE-2023-22081
A flaw was found in the PKIX certification path validation algorithm in the JSSE component of OpenJDK. A malicious remote client could use this flaw to craft a X.509 certificate and cause denial of service in a Java application processing such certificate.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-22081?
The severity of CVE-2023-22081 is medium with a severity value of 5.3.
Which versions of Oracle Java SE are affected by CVE-2023-22081?
Oracle Java SE versions 8u381, 8u381-perf, 11.0.20, 17.0.8, and 20.0.2 are affected by CVE-2023-22081.
Which versions of Oracle GraalVM for JDK are affected by CVE-2023-22081?
Oracle GraalVM for JDK versions 17.0.8 and 20.0.2 are affected by CVE-2023-22081.
How can CVE-2023-22081 be exploited?
CVE-2023-22081 is an easily exploitable vulnerability that allows unauthorized access.
Where can I find more information about CVE-2023-22081?
You can find more information about CVE-2023-22081 at the following references: [Oracle Security Alerts](https://www.oracle.com/security-alerts/cpuoct2023.html) and [Red Hat Security Advisory RHSA-2023:5742](https://access.redhat.com/errata/RHSA-2023:5742).