Логотип exploitDog
bind:"GHSA-8gw4-4gr2-h2mr" OR bind:"CVE-2024-21217"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-8gw4-4gr2-h2mr" OR bind:"CVE-2024-21217"

Количество 31

Количество 31

github логотип

GHSA-8gw4-4gr2-h2mr

8 месяцев назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandbox...

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2024-21217

8 месяцев назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxe...

CVSS3: 3.7
EPSS: Низкий
redhat логотип

CVE-2024-21217

8 месяцев назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandbox...

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-21217

8 месяцев назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2024-21217

8 месяцев назад

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 3.7
EPSS: Низкий
fstec логотип

BDU:2024-08450

больше 1 года назад

Уязвимость компонента Serialization виртуальных машин Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK и программной платформы Oracle Java SE, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0435-1

4 месяца назад

Security update for java-1_8_0-openj9

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:4202-1

7 месяцев назад

Security update for java-1_8_0-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3963-1

7 месяцев назад

Security update for java-17-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3954-1

7 месяцев назад

Security update for java-21-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3875-1

8 месяцев назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3802-1

8 месяцев назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:4306-1

6 месяцев назад

Security update for java-1_8_0-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:4252-1

7 месяцев назад

Security update for java-1_8_0-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:3987-1

7 месяцев назад

Security update for java-1_8_0-openjdk

EPSS: Низкий
rocky логотип

RLSA-2024:8127

8 месяцев назад

Moderate: java-21-openjdk security update

EPSS: Низкий
rocky логотип

RLSA-2024:8124

8 месяцев назад

Moderate: java-17-openjdk security update

EPSS: Низкий
rocky логотип

RLSA-2024:8121

8 месяцев назад

Moderate: java-11-openjdk security update

EPSS: Низкий
rocky логотип

RLSA-2024:8117

8 месяцев назад

Moderate: java-1.8.0-openjdk security update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-8127

8 месяцев назад

ELSA-2024-8127: java-21-openjdk security update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-8gw4-4gr2-h2mr

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandbox...

CVSS3: 3.7
0%
Низкий
8 месяцев назад
ubuntu логотип
CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxe...

CVSS3: 3.7
0%
Низкий
8 месяцев назад
redhat логотип
CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandbox...

CVSS3: 3.7
0%
Низкий
8 месяцев назад
nvd логотип
CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed

CVSS3: 3.7
0%
Низкий
8 месяцев назад
debian логотип
CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...

CVSS3: 3.7
0%
Низкий
8 месяцев назад
fstec логотип
BDU:2024-08450

Уязвимость компонента Serialization виртуальных машин Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK и программной платформы Oracle Java SE, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.7
0%
Низкий
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0435-1

Security update for java-1_8_0-openj9

4 месяца назад
suse-cvrf логотип
SUSE-SU-2024:4202-1

Security update for java-1_8_0-openjdk

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3963-1

Security update for java-17-openjdk

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3954-1

Security update for java-21-openjdk

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3875-1

Security update for java-11-openjdk

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3802-1

Security update for java-11-openjdk

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:4306-1

Security update for java-1_8_0-ibm

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:4252-1

Security update for java-1_8_0-ibm

7 месяцев назад
suse-cvrf логотип
SUSE-SU-2024:3987-1

Security update for java-1_8_0-openjdk

7 месяцев назад
rocky логотип
RLSA-2024:8127

Moderate: java-21-openjdk security update

8 месяцев назад
rocky логотип
RLSA-2024:8124

Moderate: java-17-openjdk security update

8 месяцев назад
rocky логотип
RLSA-2024:8121

Moderate: java-11-openjdk security update

8 месяцев назад
rocky логотип
RLSA-2024:8117

Moderate: java-1.8.0-openjdk security update

8 месяцев назад
oracle-oval логотип
ELSA-2024-8127

ELSA-2024-8127: java-21-openjdk security update (MODERATE)

8 месяцев назад

Уязвимостей на страницу