CVE-2024-20919

CWE-20 — Improper Input Validation17 documents9 sources
Severity
5.9MEDIUM
EPSS
0.2%
top 61.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Oracle Corporation Java SE JDK AND JREOracle GraalvmOracle Graalvm FOR JDK+2 more
Timeline
PublishedFeb 17
Latest updateNov 11

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalV…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages8 packages

▶NVDoracle/graalvm5 versions+4
▶NVDoracle/jdk4 versions+3
▶NVDoracle/jre4 versions+3
▶Ubuntuopenjdk-8< 8u402-ga-2ubuntu1~20.04+2

🔴Vulnerability Details

7
OSV
openjdk-8 vulnerabilities↗2024-03-18
▶
OSV
openjdk-21 vulnerabilities↗2024-02-27
▶
OSV
openjdk-lts vulnerabilities↗2024-02-27
▶
OSV
openjdk-17 vulnerabilities↗2024-02-27
▶
OSV
CVE-2024-20919: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)↗2024-02-17
▶

📋Vendor Advisories

9
Ubuntu
OpenJDK 8 vulnerabilities↗2024-11-11
▶
Atlassian
CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945↗2024-07-16
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2024-03-18
▶
Ubuntu
OpenJDK 21 vulnerabilities↗2024-02-27
▶
Ubuntu
OpenJDK 11 vulnerabilities↗2024-02-27
▶
CVE-2024-20919 (MEDIUM CVSS 5.9) | Vulnerability in the Oracle Java SE | cvebase.io