GCVE - cpe:2.3:a:oracle:openjdk:1.8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:openjdk:1.8.0:*:*:*:*:*:*:*

part: a version: 1.8.0 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Openjdk (`8263daec-d494-5223-bb1f-fd54ac9e7e03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/openjdk/jdk`	purl2cpe	2026-06-01 10:18:14.464703
`pkg:openjdk.java/jdk`	purl2cpe	2026-06-01 10:18:14.464704
`pkg:rpm/fedora/java-1.6.0-openjdk`	purl2cpe	2026-06-01 10:18:14.464706
`pkg:rpm/opensuse/java-1.6.0-openjdk`	purl2cpe	2026-06-01 10:18:14.464707

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-20264`	vulnerable	2026-06-08 05:29:08.847493	Details available An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Published: 2021-10-06T15:12:05.000Z Updated: 2024-08-03T17:37:23.455Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1932283	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1876`	vulnerable	2026-06-08 05:05:26.541960	Details available The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log. Published: 2014-02-10T23:00:00.000Z Updated: 2024-08-06T09:58:15.835Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2187-1 http://rhn.redhat.com/errata/RHSA-2014-0675.html https://access.redhat.com/errata/RHSA-2014:0414 http://security.gentoo.org/glsa/glsa-201406-32.xml http://www.ubuntu.com/usn/USN-2191-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2739`	vulnerable	2026-06-08 05:02:06.031189	Details available Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table. Published: 2012-11-28T11:00:00.000Z Updated: 2024-08-06T19:42:32.448Z Open on db.gcve.eu Reference links http://www.nruns.com/_downloads/advisory28122011.pdf http://armoredbarista.blogspot.de/2012/02/investigating-hashdos-issue.html https://bugzilla.redhat.com/show_bug.cgi?id=750533 http://www.openwall.com/lists/oss-security/2012/06/17/1 http://www.kb.cert.org/vuls/id/903934	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.