CVE-2024-21210

EUVD-2024-18924
Vulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
oracleCNA
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
oraclejdk
1.8.0
oraclejdk
1.8.0
oraclejdk
11.0.24
oraclejdk
17.0.12
oraclejdk
21.0.4
oraclejre
1.8.0
oraclejre
1.8.0
oraclejre
11.0.4
oraclejre
17.0.12
oraclejre
21.0.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjdk-11
bullseye
vulnerable
bullseye (security)
11.0.29+6-1~deb11u1
fixed
sid
11.0.29+7-1
fixed
openjdk-17
bookworm
17.0.16+8-1~deb12u1
fixed
bookworm (security)
17.0.17+10-1~deb12u1
fixed
bullseye
vulnerable
bullseye (security)
17.0.17+10-1~deb11u1
fixed
sid
17.0.17+10-1
fixed
openjdk-21
forky
21.0.10~4ea-1
fixed
sid
21.0.10~4ea-1
fixed
trixie
21.0.9+10-1~deb13u1
fixed
trixie (security)
21.0.9+10-1~deb13u1
fixed
openjdk-8
sid
8u472-ga-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-8
bionic
Fixed 8u432-ga~us1-0ubuntu2~18.04
released
focal
Fixed 8u432-ga~us1-0ubuntu2~20.04
released
jammy
Fixed 8u432-ga~us1-0ubuntu2~22.04
released
noble
Fixed 8u432-ga~us1-0ubuntu2~24.04
released
oracular
Fixed 8u432-ga~us1-0ubuntu2~24.10
released
plucky
Fixed 8u432-ga~us1-0ubuntu1
released
questing
Fixed 8u432-ga~us1-0ubuntu1
released
xenial
Fixed 8u432-ga~us1-0ubuntu2~16.04.4
released
openjdk-9
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
ignored
openjdk-lts
bionic
Fixed 11.0.25+9-1ubuntu1~18.04
released
focal
Fixed 11.0.25+9-1ubuntu1~20.04
released
jammy
Fixed 11.0.25+9-1ubuntu1~22.04
released
noble
Fixed 11.0.25+9-1ubuntu1~24.04
released
oracular
Fixed 11.0.25+9-1ubuntu1~24.10
released
plucky
Fixed 11.0.26~3ea-1ubuntu1
released
questing
Fixed 11.0.26~3ea-1ubuntu1
released
openjdk-13
focal
ignored
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
openjdk-16
focal
ignored
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
openjdk-17
bionic
Fixed 17.0.13+11-2ubuntu1~18.04.2
released
focal
Fixed 17.0.13+11-2ubuntu1~20.04
released
jammy
Fixed 17.0.13+11-2ubuntu1~22.04
released
noble
Fixed 17.0.13+11-2ubuntu1~24.04
released
oracular
Fixed 17.0.13+11-2ubuntu1~24.10
released
plucky
not-affected
questing
not-affected
openjdk-18
focal
dne
jammy
ignored
noble
dne
oracular
dne
plucky
dne
questing
dne
openjdk-19
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
openjdk-21
focal
Fixed 21.0.5+11-1ubuntu1~20.04
released
jammy
Fixed 21.0.5+11-1ubuntu1~22.04
released
noble
Fixed 21.0.5+11-1ubuntu1~24.04
released
oracular
Fixed 21.0.5+11-1ubuntu1~24.10
released
plucky
not-affected
questing
not-affected
openjdk-22
focal
dne
jammy
dne
noble
dne
oracular
ignored
plucky
dne
questing
dne
openjdk-23
bionic
dne
focal
dne
jammy
dne
noble
dne
oracular
Fixed 23.0.1+11-1ubuntu1~24.10.1
released
plucky
dne
questing
dne
trusty
dne
xenial
dne
openjdk-17-crac
bionic
dne
focal
dne
jammy
dne
noble
dne
oracular
Fixed 17.0.14+7-0ubuntu1~24.10
released
plucky
not-affected
questing
not-affected
trusty
dne
xenial
dne
openjdk-21-crac
bionic
dne
focal
dne
jammy
dne
noble
dne
oracular
Fixed 21.0.6+7-0ubuntu1~24.10
released
plucky
not-affected
questing
not-affected
trusty
dne
xenial
dne