CVE-2024-21138

Summary

CVE-2024-21138 is a vulnerability affecting various versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. Affected versions include 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1 for Java SE, 17.0.11, 21.0.3, 22.0.1 for GraalVM for JDK, and 20.3.14 and 21.3.10 for GraalVM Enterprise Edition. This issue is classified as difficult to exploit and allows unauthenticated attackers to cause a partial denial of service (DoS) via multiple network protocols. Successful attacks can result in unauthorized access to these systems. The vulnerability can be exploited by untrusted code running in sandboxed Java Web Start applications or sandboxed Java applets. The Common Vulnerability Scoring System (CVSS) Base Score is 3.7, with an impact on availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.