CVE-2023-38264
EUVD-2023-4208414.05.2024, 13:21
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | java_software_development_kit | 7.1.0.0 ≤ 𝑥 < 7.1.5.22 |
| ibm | java_software_development_kit | 8.0.0.0 ≤ 𝑥 < 8.0.8.25 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| java-1.8.0-ibm |
| ||||
| java-1.8.0-ibm-demo |
| ||||
| java-1.8.0-ibm-devel |
| ||||
| java-1.8.0-ibm-headless |
| ||||
| java-1.8.0-ibm-jdbc |
| ||||
| java-1.8.0-ibm-plugin |
| ||||
| java-1.8.0-ibm-src |
| ||||
| java-1.8.0-ibm-webstart |
|
Common Weakness Enumeration