CVE-2024-21098

EUVD-2024-18812
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
oracleCNA
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
oraclegraalvm
20.3.13
oraclegraalvm
21.3.9
oraclegraalvm_for_jdk
17.0.10
oraclegraalvm_for_jdk
21.0.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-9
focal
dne
jammy
dne
mantic
dne
noble
dne
oracular
dne
xenial
ignored
openjdk-13
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
openjdk-16
focal
ignored
jammy
dne
mantic
dne
noble
dne
oracular
dne
openjdk-18
focal
dne
jammy
ignored
mantic
dne
noble
dne
oracular
dne
openjdk-19
focal
dne
jammy
dne
mantic
ignored
noble
dne
oracular
dne
openjdk-20
focal
dne
jammy
dne
mantic
ignored
noble
dne
oracular
dne
openjdk-22
focal
dne
jammy
dne
mantic
not-affected
oracular
not-affected
openjdk-17
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
not-affected
noble
not-affected
oracular
not-affected
openjdk-8
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
not-affected
noble
not-affected
oracular
not-affected
xenial
not-affected
openjdk-21
focal
not-affected
jammy
not-affected
mantic
not-affected
noble
not-affected
oracular
not-affected
openjdk-lts
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
not-affected
noble
not-affected
oracular
not-affected