CVE-2024-21210 — Observable Discrepancy in Corporation Oracle Java SE

CWE-203 — Observable DiscrepancyCWE-190 — Integer Overflow or Wraparound22 documents8 sources
Severity
3.7LOWNVD
EPSS
0.1%
top 65.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Corporation Oracle Java SEOracle JDKOracle JRE
Timeline
PublishedOct 15
Latest updateMar 11

Description

Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using API…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5oracle_corporation/oracle_java_se6 versions+5
▶NVDoracle/jdk5 versions+4
▶NVDoracle/jre5 versions+4

🔴Vulnerability Details

11
OSV
openjdk-21-crac vulnerabilities↗2025-03-11
▶
OSV
openjdk-17-crac vulnerabilities↗2025-03-11
▶
OSV
openjdk-8 regressions↗2025-02-05
▶
OSV
openjdk-23 vulnerabilities↗2024-11-24
▶
OSV
openjdk-17 vulnerabilities↗2024-11-11
▶

📋Vendor Advisories

10
Ubuntu
CRaC JDK 17 vulnerabilities↗2025-03-11
▶
Ubuntu
CRaC JDK 21 vulnerabilities↗2025-03-11
▶
Ubuntu
OpenJDK 23 vulnerabilities↗2024-11-24
▶
Ubuntu
OpenJDK 11 vulnerabilities↗2024-11-11
▶
Ubuntu
OpenJDK 8 vulnerabilities↗2024-11-11
▶
CVE-2024-21210 — Observable Discrepancy | cvebase