CVE-2024-21011

CWE-770 — Allocation without LimitsCWE-11717 documents9 sources
Severity
3.7LOW
EPSS
0.3%
top 43.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Oracle Corporation Java SE JDK AND JREDebian Debian LinuxOracle Graalvm+3 more
Timeline
PublishedApr 16
Latest updateNov 11

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle Graa…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.2 | Impact: 1.4

Affected Packages11 packages

▶CVEListV5oracle_corporation/java_se_jdk_and_jre11 versions+10
▶NVDoracle/graalvm5 versions+4
▶NVDoracle/jdk5 versions+4
▶NVDoracle/jre5 versions+4
▶Ubuntuopenjdk-8< 8u412-ga-1~20.04.1+3

Also affects: Debian Linux 10.0

🔴Vulnerability Details

7
OSV
openjdk-21 vulnerabilities↗2024-06-06
▶
OSV
openjdk-lts vulnerabilities↗2024-06-06
▶
OSV
openjdk-8 vulnerabilities↗2024-06-06
▶
OSV
openjdk-17 vulnerabilities↗2024-06-06
▶
GHSA
GHSA-7qqv-8pwc-x4xc: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)↗2024-04-17
▶

📋Vendor Advisories

9
Ubuntu
OpenJDK 8 vulnerabilities↗2024-11-11
▶
Atlassian
CVE-2023-22025 CVE-2023-22081 CVE-2024-20918 CVE-2024-20919 CVE-2024-20921 CVE-2024-20926 CVE-2024-20932 CVE-2024-20945↗2024-07-16
▶
Ubuntu
OpenJDK 21 vulnerabilities↗2024-06-06
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2024-06-06
▶
Ubuntu
OpenJDK 17 vulnerabilities↗2024-06-06
▶
CVE-2024-21011 (LOW CVSS 3.7) | Vulnerability in the Oracle Java SE | cvebase.io