CVE-2024-21098

Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
oracleCNA
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA-ADPADP
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
VendorProductVersion
oraclegraalvm
20.3.13
oraclegraalvm
21.3.9
oraclegraalvm_for_jdk
17.0.10
oraclegraalvm_for_jdk
21.0.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-13
oracular
dne
noble
dne
mantic
dne
jammy
dne
focal
ignored
openjdk-16
oracular
dne
noble
dne
mantic
dne
jammy
dne
focal
ignored
openjdk-17
oracular
not-affected
noble
not-affected
mantic
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
openjdk-18
oracular
dne
noble
dne
mantic
dne
jammy
ignored
focal
dne
openjdk-19
oracular
dne
noble
dne
mantic
ignored
jammy
ignored
focal
dne
openjdk-20
oracular
dne
noble
dne
mantic
ignored
jammy
dne
focal
dne
openjdk-21
oracular
not-affected
noble
not-affected
mantic
not-affected
jammy
not-affected
focal
not-affected
openjdk-22
oracular
not-affected
mantic
not-affected
jammy
dne
focal
dne
openjdk-8
oracular
not-affected
noble
not-affected
mantic
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
openjdk-9
oracular
dne
noble
dne
mantic
dne
jammy
dne
focal
dne
xenial
ignored
openjdk-lts
oracular
not-affected
noble
not-affected
mantic
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected