{"id":"CVE-2021-2388","details":"Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).","aliases":["BIT-java-2021-2388","BIT-java-min-2021-2388","BIT-jre-2021-2388"],"modified":"2026-05-18T05:52:21.355824287Z","published":"2021-07-21T15:15:40.827Z","related":["ALSA-2021:2776","ALSA-2021:2781","CGA-9pj5-24x7-wr9v","SUSE-SU-2021:2613-1","SUSE-SU-2021:2797-1","SUSE-SU-2021:2798-1","SUSE-SU-2021:2952-1","SUSE-SU-2022:14876-1","openSUSE-SU-2021:1176-1","openSUSE-SU-2021:1233-1","openSUSE-SU-2021:1455-1","openSUSE-SU-2021:2798-1","openSUSE-SU-2021:2952-1","openSUSE-SU-2021:3615-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10873-1","openSUSE-SU-2024:10874-1","openSUSE-SU-2024:10876-1","openSUSE-SU-2024:11896-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"debian:debian_linux","extracted_events":[{"last_affected":"9.0"},{"last_affected":"10.0"}],"cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"source":"CPE_FIELD"},{"vendor_product":"oracle:jdk","extracted_events":[{"last_affected":"1.8.0-update291"},{"last_affected":"11.0.11"},{"last_affected":"16.0.1"}],"cpes":["cpe:2.3:a:oracle:jdk:1.8.0:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:16.0.1:*:*:*:*:*:*:*"],"source":"CPE_FIELD"},{"vendor_product":"oracle:jre","extracted_events":[{"last_affected":"1.8.0-update291"},{"last_affected":"11.0.11"},{"last_affected":"16.0.1"}],"cpes":["cpe:2.3:a:oracle:jre:1.8.0:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jre:16.0.1:*:*:*:*:*:*:*"],"source":"CPE_FIELD"},{"vendor_product":"oracle:openjdk","extracted_events":[{"last_affected":"8-NA"},{"last_affected":"8-NA"},{"last_affected":"8-NA"},{"last_affected":"8-milestone1"},{"last_affected":"8-milestone1"},{"last_affected":"8-milestone1"},{"last_affected":"8-milestone2"},{"last_affected":"8-milestone2"},{"last_affected":"8-milestone2"},{"last_affected":"8-milestone3"},{"last_affected":"8-milestone3"},{"last_affected":"8-milestone3"},{"last_affected":"8-milestone4"},{"last_affected":"8-milestone4"},{"last_affected":"8-milestone4"},{"last_affected":"8-milestone5"},{"last_affected":"8-milestone5"},{"last_affected":"8-milestone5"},{"last_affected":"8-milestone6"},{"last_affected":"8-milestone6"},{"last_affected":"8-milestone6"},{"last_affected":"8-milestone7"},{"last_affected":"8-milestone7"},{"last_affected":"8-milestone7"},{"last_affected":"8-milestone8"},{"last_affected":"8-milestone8"},{"last_affected":"8-milestone8"},{"last_affected":"8-milestone9"},{"last_affected":"8-milestone9"},{"last_affected":"8-milestone9"},{"last_affected":"8-update141"},{"last_affected":"8-update141"},{"last_affected":"8-update141"},{"last_affected":"8-update151"},{"last_affected":"8-update151"},{"last_affected":"8-update151"},{"last_affected":"8-update152"},{"last_affected":"8-update152"},{"last_affected":"8-update152"},{"last_affected":"8-update161"},{"last_affected":"8-update161"},{"last_affected":"8-update161"},{"last_affected":"8-update162"},{"last_affected":"8-update162"},{"last_affected":"8-update162"},{"last_affected":"8-update171"},{"last_affected":"8-update171"},{"last_affected":"8-update171"},{"last_affected":"8-update172"},{"last_affected":"8-update172"},{"last_affected":"8-update172"},{"last_affected":"8-update181"},{"last_affected":"8-update181"},{"last_affected":"8-update181"},{"last_affected":"8-update191"},{"last_affected":"8-update191"},{"last_affected":"8-update191"},{"last_affected":"8-update192"},{"last_affected":"8-update192"},{"last_affected":"8-update192"},{"last_affected":"8-update201"},{"last_affected":"8-update201"},{"last_affected":"8-update201"},{"last_affected":"8-update202"},{"last_affected":"8-update202"},{"last_affected":"8-update202"},{"last_affected":"8-update211"},{"last_affected":"8-update211"},{"last_affected":"8-update211"},{"last_affected":"8-update212"},{"last_affected":"8-update212"},{"last_affected":"8-update212"},{"last_affected":"8-update221"},{"last_affected":"8-update221"},{"last_affected":"8-update221"},{"last_affected":"8-update222"},{"last_affected":"8-update222"},{"last_affected":"8-update222"},{"last_affected":"8-update231"},{"last_affected":"8-update231"},{"last_affected":"8-update231"},{"last_affected":"8-update232"},{"last_affected":"8-update232"},{"last_affected":"8-update232"},{"last_affected":"8-update241"},{"last_affected":"8-update241"},{"last_affected":"8-update241"},{"last_affected":"8-update242"},{"last_affected":"8-update242"},{"last_affected":"8-update242"},{"last_affected":"8-update252"},{"last_affected":"8-update252"},{"last_affected":"8-update252"},{"last_affected":"8-update262"},{"last_affected":"8-update262"},{"last_affected":"8-update262"},{"last_affected":"8-update271"},{"last_affected":"8-update271"},{"last_affected":"8-update271"},{"last_affected":"8-update281"},{"last_affected":"8-update281"},{"last_affected":"8-update281"},{"last_affected":"8-update282"},{"last_affected":"8-update282"},{"last_affected":"8-update282"},{"last_affected":"8-update291"},{"last_affected":"8-update291"},{"last_affected":"8-update291"},{"last_affected":"8-update292"},{"last_affected":"8-update292"},{"last_affected":"8-update292"},{"last_affected":"11.0.1"},{"last_affected":"11.0.1"},{"last_affected":"11.0.1"},{"last_affected":"11.0.2"},{"last_affected":"11.0.2"},{"last_affected":"11.0.2"},{"last_affected":"11.0.3"},{"last_affected":"11.0.3"},{"last_affected":"11.0.3"},{"last_affected":"11.0.4"},{"last_affected":"11.0.4"},{"last_affected":"11.0.4"},{"last_affected":"11.0.5"},{"last_affected":"11.0.5"},{"last_affected":"11.0.5"},{"last_affected":"11.0.6"},{"last_affected":"11.0.6"},{"last_affected":"11.0.6"},{"last_affected":"11.0.7"},{"last_affected":"11.0.7"},{"last_affected":"11.0.7"},{"last_affected":"11.0.8"},{"last_affected":"11.0.8"},{"last_affected":"11.0.8"},{"last_affected":"11.0.9"},{"last_affected":"11.0.9"},{"last_affected":"11.0.9"},{"last_affected":"11.0.10"},{"last_affected":"11.0.10"},{"last_affected":"11.0.10"},{"last_affected":"11.0.11"},{"last_affected":"11.0.11"},{"last_affected":"11.0.11"},{"last_affected":"13.0.1"},{"last_affected":"13.0.1"},{"last_affected":"13.0.1"},{"last_affected":"13.0.2"},{"last_affected":"13.0.2"},{"last_affected":"13.0.2"},{"last_affected":"13.0.3"},{"last_affected":"13.0.3"},{"last_affected":"13.0.3"},{"last_affected":"13.0.4"},{"last_affected":"13.0.4"},{"last_affected":"13.0.4"},{"last_affected":"13.0.5"},{"last_affected":"13.0.5"},{"last_affected":"13.0.5"},{"last_affected":"13.0.6"},{"last_affected":"13.0.6"},{"last_affected":"13.0.6"},{"last_affected":"13.0.7"},{"last_affected":"13.0.7"},{"last_affected":"13.0.7"},{"last_affected":"16.0.1"},{"last_affected":"16.0.1"},{"last_affected":"16.0.1"}],"cpes":["cpe:2.3:a:oracle:openjdk:11.0.10:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.8:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11.0.9:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.3:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.6:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13.0.7:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:16.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update291:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update292:*:*:*:*:*:*"],"source":"CPE_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00011.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202209-05"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210723-0002/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4946"},{"type":"ADVISORY","url":"https://www.oracle.com/security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/graalvm/graalvm-ce-builds","events":[{"introduced":"0"},{"last_affected":"cf616f9f924f9e60b6158ff4aaed8306382b4c31"},{"last_affected":"a748f59635430848730ca95f41a9f7fa1f26b12b"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:graalvm:21.1.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"20.3.2"},{"last_affected":"21.1.0"}],"source":"CPE_FIELD"}}],"versions":["vm-21.1.0","vm-20.3.2","vm-19.3.6","vm-20.3.1.2","vm-21.0.0.2","vm-21.0.0","vm-20.3.1","vm-19.3.5","vm-20.3.0","vm-19.3.4","vm-20.2.0","vm-19.3.3","vm-20.1.0","vm-19.3.2","vm-20.0.1","vm-19.3.2-pre"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk","events":[{"introduced":"0"},{"last_affected":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"e9a2e84e45e1120aa306a01dfb087200f6a7f903"},{"last_affected":"7c18f827d7f096cbeb96b086a8516754f0c70221"},{"last_affected":"27cab0e0c87f124277c7afeb5dd6a8750443804e"},{"last_affected":"d38a1f186d640dede9fccb727ec98db3a413f9d8"},{"last_affected":"0d3829a2c5a70961ffc539865adc1442c1a30bb1"},{"last_affected":"69efabad3d8a2ff47a62a4626c574a56edec1cfd"},{"last_affected":"da75f3c4ad5bdf25167a3ed80e51f567ab3dbd01"},{"last_affected":"d5914f18390f71c9bdc333f66cbee6164eb7f857"},{"last_affected":"4a588d89f01a650d90432cc14697a5a2ae2c97d3"},{"last_affected":"4de3a6be9e60b9676f2199cd18eadb54a9d6e3fe"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"8-update101"},{"last_affected":"8-update102"},{"last_affected":"8-update11"},{"last_affected":"8-update111"},{"last_affected":"8-update112"},{"last_affected":"8-update20"},{"last_affected":"8-update25"},{"last_affected":"11"},{"last_affected":"13"},{"last_affected":"15"},{"last_affected":"16"}],"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:16:*:*:*:*:*:*:*"],"source":"CPE_FIELD"}}],"versions":["jdk-16-ga","jdk-16+36","jdk-16+35","jdk-16+34","jdk-16+33","jdk-16+32","jdk-16+31","jdk-16+30","jdk-16+29","jdk-17+0","jdk-16+28","jdk-16+27","jdk-16+26","jdk-16+25","jdk-16+24","jdk-16+23","jdk-16+22","jdk-16+21","jdk-16+20","jdk-16+19","jdk-16+18","jdk-16+17","jdk-16+16","jdk-16+15","jdk-16+14","jdk-15-ga","jdk-15+36","jdk-15+35","jdk-15+34","jdk-15+33","jdk-15+32","jdk-15+30","jdk-15+29","jdk-15+28","jdk-16+0","jdk-15+27","jdk-15+6","jdk-15+4","jdk-15+3","jdk-15+2","jdk-15+0","jdk-15+1","jdk-13-ga","jdk-13+33","jdk-13+32","jdk-13+31","jdk-13+30","jdk-13+27","jdk-13+26","jdk-14+0","jdk-13+25","jdk-11-ga","jdk-11+28","jdk-11+27","jdk-11+26","jdk-11+25","jdk-11+24","jdk-11+23","jdk-11+22","jdk-11+21","jdk-11+20","jdk-12+0","jdk-10+24","jdk-10+23","jdk-10+22","jdk-10+21","jdk-10+20","jdk-9+156","jdk-9+155","jdk-9+154","jdk-9+153","jdk-9+152","jdk-9+151","jdk-9+150","jdk-9+149","jdk-9+148","jdk-9+147","jdk-9+146","jdk-9+145","jdk-9+144","jdk-9+143","jdk-9+142","jdk-9+141","jdk-9+140","jdk-9+139","jdk-9+138","jdk-9+137","jdk-9+136","jdk-9+135","jdk-9+134","jdk-9+133","jdk-9+132","jdk-9+131","jdk-9+130","jdk-9+129","jdk-9+128","jdk-9+127","jdk-9+124","jdk-9+123","jdk-9+122","jdk-9+121","jdk-9+120","jdk-9+119","jdk-9+118","jdk-9+117","jdk-9+116","jdk-9+115","jdk-9+114","jdk-9+113","jdk-9+112","jdk-9+111","jdk-9+110","jdk-9+109","jdk-9+108","jdk-9+107","jdk-9+106","jdk-9+105","jdk-9+104","jdk-9+103","jdk-9+102","jdk-9+101","jdk-9+100","jdk-9+99","jdk-9+98","jdk-9+97","jdk-9+96","jdk-9+95","jdk9-b94","jdk9-b92","jdk9-b91","jdk9-b90","jdk9-b89","jdk9-b88","jdk9-b87","jdk9-b86","jdk9-b85","jdk9-b84","jdk9-b83","jdk9-b82","jdk9-b81","jdk9-b80","jdk9-b79","jdk9-b78","jdk9-b77","jdk9-b76","jdk9-b75","jdk9-b74","jdk9-b73","jdk9-b72","jdk9-b71","jdk9-b70","jdk9-b69","jdk9-b68","jdk9-b67","jdk9-b66","jdk9-b65","jdk9-b64","jdk9-b63","jdk9-b62","jdk9-b61","jdk9-b60","jdk9-b59","jdk9-b58","jdk9-b57","jdk9-b56","jdk9-b55","jdk9-b54","jdk9-b53","jdk9-b52","jdk9-b51","jdk9-b50","jdk9-b49","jdk9-b48","jdk9-b47","jdk9-b46","jdk9-b45","jdk9-b44","jdk9-b43","jdk9-b42","jdk9-b41","jdk9-b40","jdk9-b39","jdk9-b38","jdk9-b37","jdk9-b36","jdk9-b35","jdk9-b34","jdk9-b33","jdk9-b32","jdk9-b31","jdk9-b30","jdk9-b27","jdk9-b26","jdk9-b25","jdk9-b24","jdk9-b23","jdk9-b21","jdk9-b20","jdk9-b19","jdk9-b18","jdk9-b17","jdk9-b16","jdk9-b15","jdk9-b14","jdk9-b13","jdk9-b12","jdk9-b11","jdk9-b10","jdk9-b08","jdk9-b07","jdk9-b06","jdk9-b05","jdk9-b04","jdk9-b01","jdk9-b00","jdk8-b120","jdk8-b119","jdk8-b112","jdk8-b111","jdk8-b110","jdk8-b109","jdk8-b108","jdk8-b107","jdk8-b106","jdk8-b105","jdk8-b104","jdk8-b103","jdk8-b102","jdk8-b101","jdk8-b100","jdk8-b99","jdk8-b98","jdk8-b55","jdk8-b54","jdk8-b53","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b11","jdk8-b10","jdk8-b09","jdk8-b08","jdk8-b07","jdk8-b06","jdk8-b05","jdk8-b04","jdk8-b03","jdk8-b02","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80","jdk7-b79","jdk7-b78","jdk7-b77","jdk7-b76","jdk7-b75","jdk7-b74","jdk7-b73","jdk7-b72","jdk7-b71","jdk7-b70","jdk7-b68","jdk7-b66","jdk7-b65","jdk7-b64","jdk7-b63","jdk7-b62","jdk7-b61","jdk7-b60","jdk7-b56","jdk7-b55","jdk7-b54","jdk7-b53","jdk7-b51","jdk7-b50","jdk7-b49","jdk7-b48","jdk7-b46","jdk7-b45","jdk7-b44","jdk7-b41","jdk7-b40","jdk7-b39","jdk7-b38","jdk7-b36","jdk7-b35","jdk7-b34","jdk7-b33","jdk7-b32","jdk7-b31","jdk7-b28","jdk7-b27","jdk7-b26","jdk7-b25","jdk7-b24"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk15u","events":[{"introduced":"0"},{"last_affected":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"e9a2e84e45e1120aa306a01dfb087200f6a7f903"},{"last_affected":"7c18f827d7f096cbeb96b086a8516754f0c70221"},{"last_affected":"27cab0e0c87f124277c7afeb5dd6a8750443804e"},{"last_affected":"d38a1f186d640dede9fccb727ec98db3a413f9d8"},{"last_affected":"0d3829a2c5a70961ffc539865adc1442c1a30bb1"},{"last_affected":"69efabad3d8a2ff47a62a4626c574a56edec1cfd"},{"last_affected":"a9a271179d2a7952154b7509a999b100cc98b13c"},{"last_affected":"d5914f18390f71c9bdc333f66cbee6164eb7f857"},{"last_affected":"4a588d89f01a650d90432cc14697a5a2ae2c97d3"},{"last_affected":"5b2d771adfe8a556b628583a785387f69ee7f7ab"},{"last_affected":"2a85ee4a169543000d9ac17c4781086e743b5f85"},{"last_affected":"acc01bf89be85c594633bc830e6ca8e8b04e1505"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"8-update101"},{"last_affected":"8-update102"},{"last_affected":"8-update11"},{"last_affected":"8-update111"},{"last_affected":"8-update112"},{"last_affected":"8-update20"},{"last_affected":"8-update25"},{"last_affected":"11"},{"last_affected":"13"},{"last_affected":"15"},{"last_affected":"15.0.1"},{"last_affected":"15.0.2"},{"last_affected":"15.0.3"}],"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.1:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:15.0.3:*:*:*:*:*:*:*"],"source":"CPE_FIELD"}}],"versions":["jdk-15.0.3-ga","jdk-15.0.3+3","jdk-15.0.3+2","jdk-15.0.3+0","jdk-15.0.2-ga","jdk-15.0.2+7","jdk-15.0.2+6","jdk-15.0.3+1","jdk-15.0.2+5","jdk-15.0.2+4","jdk-15.0.2+3","jdk-15.0.2+2","jdk-15.0.2+1","jdk-15.0.1-ga","jdk-15.0.1+9","jdk-15.0.1+8","jdk-15.0.1+7","jdk-15.0.1+6","jdk-15-ga","jdk-15+36","jdk-15.0.1+5","jdk-15+35","jdk-15.0.1+4","jdk-15.0.1+3","jdk-15+34","jdk-15+33","jdk-15.0.1+2","jdk-15.0.2+0","jdk-15+32","jdk-15.0.1+1","jdk-15+30","jdk-15+29","jdk-15+28","jdk-15.0.1+0","jdk-15+27","jdk-15+6","jdk-15+4","jdk-15+3","jdk-15+2","jdk-15+0","jdk-15+1","jdk-13-ga","jdk-13+33","jdk-13+32","jdk-13+31","jdk-13+30","jdk-13+27","jdk-13+26","jdk-14+0","jdk-13+25","jdk-12+0","jdk-11+0","jdk-10+24","jdk-10+23","jdk-10+22","jdk-10+21","jdk-10+20","jdk-9+156","jdk-9+155","jdk-9+154","jdk-9+153","jdk-9+152","jdk-9+151","jdk-9+150","jdk-9+149","jdk-9+148","jdk-9+147","jdk-9+146","jdk-9+145","jdk-9+144","jdk-9+143","jdk-9+142","jdk-9+141","jdk-9+140","jdk-9+139","jdk-9+138","jdk-9+137","jdk-9+136","jdk-9+135","jdk-9+134","jdk-9+133","jdk-9+132","jdk-9+131","jdk-9+130","jdk-9+129","jdk-9+128","jdk-9+127","jdk-9+124","jdk-9+123","jdk-9+122","jdk-9+121","jdk-9+120","jdk-9+119","jdk-9+118","jdk-9+117","jdk-9+116","jdk-9+115","jdk-9+114","jdk-9+113","jdk-9+112","jdk-9+111","jdk-9+110","jdk-9+109","jdk-9+108","jdk-9+107","jdk-9+106","jdk-9+105","jdk-9+104","jdk-9+103","jdk-9+102","jdk-9+101","jdk-9+100","jdk-9+99","jdk-9+98","jdk-9+97","jdk-9+96","jdk-9+95","jdk9-b94","jdk9-b92","jdk9-b91","jdk9-b90","jdk9-b89","jdk9-b88","jdk9-b87","jdk9-b86","jdk9-b85","jdk9-b84","jdk9-b83","jdk9-b82","jdk9-b81","jdk9-b80","jdk9-b79","jdk9-b78","jdk9-b77","jdk9-b76","jdk9-b75","jdk9-b74","jdk9-b73","jdk9-b72","jdk9-b71","jdk9-b70","jdk9-b69","jdk9-b68","jdk9-b67","jdk9-b66","jdk9-b65","jdk9-b64","jdk9-b63","jdk9-b62","jdk9-b61","jdk9-b60","jdk9-b59","jdk9-b58","jdk9-b57","jdk9-b56","jdk9-b55","jdk9-b54","jdk9-b53","jdk9-b52","jdk9-b51","jdk9-b50","jdk9-b49","jdk9-b48","jdk9-b47","jdk9-b46","jdk9-b45","jdk9-b44","jdk9-b43","jdk9-b42","jdk9-b41","jdk9-b40","jdk9-b39","jdk9-b38","jdk9-b37","jdk9-b36","jdk9-b35","jdk9-b34","jdk9-b33","jdk9-b32","jdk9-b31","jdk9-b30","jdk9-b27","jdk9-b26","jdk9-b25","jdk9-b24","jdk9-b23","jdk9-b21","jdk9-b20","jdk9-b19","jdk9-b18","jdk9-b17","jdk9-b16","jdk9-b15","jdk9-b14","jdk9-b13","jdk9-b12","jdk9-b11","jdk9-b10","jdk9-b08","jdk9-b07","jdk9-b06","jdk9-b05","jdk9-b04","jdk9-b01","jdk9-b00","jdk8-b120","jdk8-b119","jdk8-b112","jdk8-b111","jdk8-b110","jdk8-b109","jdk8-b108","jdk8-b107","jdk8-b106","jdk8-b105","jdk8-b104","jdk8-b103","jdk8-b102","jdk8-b101","jdk8-b100","jdk8-b99","jdk8-b98","jdk8-b55","jdk8-b54","jdk8-b53","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b11","jdk8-b10","jdk8-b09","jdk8-b08","jdk8-b07","jdk8-b06","jdk8-b05","jdk8-b04","jdk8-b03","jdk8-b02","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80","jdk7-b79","jdk7-b78","jdk7-b77","jdk7-b76","jdk7-b75","jdk7-b74","jdk7-b73","jdk7-b72","jdk7-b71","jdk7-b70","jdk7-b68","jdk7-b66","jdk7-b65","jdk7-b64","jdk7-b63","jdk7-b62","jdk7-b61","jdk7-b60","jdk7-b56","jdk7-b55","jdk7-b54","jdk7-b53","jdk7-b51","jdk7-b50","jdk7-b49","jdk7-b48","jdk7-b46","jdk7-b45","jdk7-b44","jdk7-b41","jdk7-b40","jdk7-b39","jdk7-b38","jdk7-b36","jdk7-b35","jdk7-b34","jdk7-b33","jdk7-b32","jdk7-b31","jdk7-b28","jdk7-b27","jdk7-b26","jdk7-b25","jdk7-b24"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-2388.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk8u","events":[{"introduced":"0"},{"last_affected":"6412341d454eee8a151cf89b51cabfb7b3d87140"},{"last_affected":"e9a2e84e45e1120aa306a01dfb087200f6a7f903"},{"last_affected":"7c18f827d7f096cbeb96b086a8516754f0c70221"},{"last_affected":"27cab0e0c87f124277c7afeb5dd6a8750443804e"},{"last_affected":"d38a1f186d640dede9fccb727ec98db3a413f9d8"},{"last_affected":"772d2a8fc0f3a6ae5dfcb1cbffc40a7999349bc6"},{"last_affected":"9205c421f33fd1938450d211369d3e2b7aec573d"},{"last_affected":"0d3829a2c5a70961ffc539865adc1442c1a30bb1"},{"last_affected":"69efabad3d8a2ff47a62a4626c574a56edec1cfd"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"8-update101"},{"last_affected":"8-update102"},{"last_affected":"8-update11"},{"last_affected":"8-update111"},{"last_affected":"8-update112"},{"last_affected":"8-update121"},{"last_affected":"8-update131"},{"last_affected":"8-update20"},{"last_affected":"8-update25"}],"cpe":["cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*"],"source":"CPE_FIELD"}}],"versions":["jdk8-b131","jdk8-b130","jdk8-b129","jdk8-b128","jdk8-b127","jdk8-b126","jdk8-b125","jdk8-b124","jdk8-b123","jdk8-b122","jdk8-b121","jdk8-b120","jdk8-b119","jdk8-b112","jdk8-b111","jdk8-b110","jdk8-b109","jdk8-b108","jdk8-b107","jdk8-b106","jdk8-b105","jdk8-b104","jdk8-b103","jdk8-b102","jdk8-b101","jdk8-b100","jdk8-b99","jdk8-b98","jdk8-b55","jdk8-b54","jdk8-b53","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b11","jdk8-b10","jdk8-b09","jdk8-b08","jdk8-b07","jdk8-b06","jdk8-b05","jdk8-b04","jdk8-b03","jdk8-b02","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80","jdk7-b79","jdk7-b78","jdk7-b77","jdk7-b76","jdk7-b75","jdk7-b74","jdk7-b73","jdk7-b72","jdk7-b71","jdk7-b70","jdk7-b68","jdk7-b66","jdk7-b65","jdk7-b64","jdk7-b63","jdk7-b62","jdk7-b61","jdk7-b60","jdk7-b56","jdk7-b55","jdk7-b54","jdk7-b53","jdk7-b51","jdk7-b50","jdk7-b49","jdk7-b48","jdk7-b46","jdk7-b45","jdk7-b44","jdk7-b41","jdk7-b40","jdk7-b39","jdk7-b38","jdk7-b36","jdk7-b35","jdk7-b34","jdk7-b33","jdk7-b32","jdk7-b31","jdk7-b28","jdk7-b27","jdk7-b26","jdk7-b25","jdk7-b24"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-2388.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}