The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system allows a perpetrator to cause partial service interruptions.

🗓️ 08 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Libraries component vulnerabilities in Oracle Java Standard Edition, GraalVM, and Oracle Solaris enable partial outages from resource release errors.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to an unspecified vulnerability in Java SE ( CVE-2022-21271)	7 May 202221:28	–	ibm
IBM Security Bulletins	Security Bulletin: Oracle Java SE is vulnerable to CVE-2022-21271 used in IBM Maximo Application Suite - Monitor Component	4 May 202318:54	–	ibm
IBM Security Bulletins	Security Bulletin: PyTorch is vulnerable to CVE-2022-45907 used in IBM Maximo Application Suite - Monitor Component	17 May 202319:00	–	ibm
ATTACKERKB	CVE-2022-21271	19 Jan 202212:15	–	attackerkb
AlpineLinux	CVE-2022-21271	19 Jan 202211:22	–	alpinelinux
Broadcom	BSA-2022-2016	14 Jul 202200:00	–	broadcom
CBLMariner	CVE-2022-21271 affecting package openjdk8 1.8.0.292-1	10 Mar 202223:47	–	cbl_mariner
Chainguard	CVE-2022-21271 vulnerabilities	23 Aug 202514:16	–	cgr
CNNVD	Oracle Solaris 输入验证错误漏洞	18 Jan 202200:00	–	cnnvd
CNVD	Oracle Solaris Input Validation Error Vulnerability	24 Jan 202200:00	–	cnvd

Vulners

Node

oracle java_seMatch7u321

OR

oracle java_seMatch8u311

OR

oracle java_seMatch11.0.13

OR

oracle graalvm_enterprise_editionMatch20.3.4

OR

oracle graalvm_enterprise_editionMatch21.3.0

OR

oracle solarisMatch11

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022011840
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20220121-0007/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-21271
abf	www.abf.rosalinux.ru/advisories/ROSA-SA-2023-2312
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

27 May 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.3

EPSS0.02789

Java Standard Edition GraalVM Oracle Solaris Resource release errors Partial outages