CVE-2024-21144

Summary

CVE-2024-21144 is a vulnerability affecting Oracle Java SE 8u411, 8u411-perf, 11.0.23, and Oracle GraalVM Enterprise Edition 20.3.14 and 21.3.10. This issue lies in the Concurrency component of these products, making it difficult for unauthenticated attackers with network access to exploit and cause a partial denial of service (DOS) on Oracle Java SE and Oracle GraalVM Enterprise Edition. These vulnerabilities typically impact Java deployments that load and run untrusted code, such as those seen in clients running Java Web Start applications or applets. The DOS can lead to availability impacts, with a CVSS 3.1 Base Score of 3.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.