OpenJDK Vulnerability Advisory - April 2024

Brocade SANnav

0 more products

25224

04 December 2024

04 December 2024

CLOSED

LOW

CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2024-21012, CVE-2023-41993, CVE-2024-21003, CVE-2024-21005, CVE-2024-21002, CVE-2024-21004

Brocade Security Advisory ID

BSA-2024-2587

Component

OpenJDK

 

 

Summary

OpenJDK is affected by multiple vulnerabilities.

Affected CVEs

  • CVE-2024-21094
  • CVE-2024-21085           
  • CVE-2024-21011
  • CVE-2024-21012
  • CVE-2023-41993
  • CVE-2024-21003
  • CVE-2024-21005
  • CVE-2024-21002
  • CVE-2024-21004

More information is available at: https://openjdk.org/groups/vulnerability/advisories/2024-04-16

Products Confirmed Not Affected

  • Brocade Fabric OS - Not Affected - [VEX Justification: Component_not_present]
  • Brocade ASCG - Not Affected - [VEX Justification: Component_not_present]
  • Brocade SANnav - Statement for Brocade SANnav : Brocade SANnav contains the vulnerable code, but is Not Affected. [VEX - Status Justification: Vulnerable_code_cannot_be_controlled_by_adversary]

Solution

Brocade SANnav is Not Affected, however, Brocade will provide the OpenJDK update in the upcoming SANnav 2.4.0 release

Revision History

Version

Change

Date

1.0

Initial Publication

12/04/2024

 

Disclaimer

THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.