CVE-2024-21208

Summary

CVE-2024-21208 is a vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, specifically in their networking components. An unauthenticated attacker with network access can exploit this difficult-to-exploit issue and cause a partial denial of service (partial DOS) on these products. This vulnerability primarily impacts Java deployments that run untrusted code, such as those with Java Web Start applications or applets, relying on the Java sandbox for security. Oracle Java SE versions 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, and 23, as well as Oracle GraalVM for JDK versions 17.0.12, 21.0.4, and 23, and Oracle GraalVM Enterprise Edition versions 20.3.15 and 21.3.11 are susceptible. The base score, according to the Common Vulnerability Scoring System (CVSS), is 3.7 for availability impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.