Lucene search

CVE-2021-35559

🗓️ 20 Oct 2021 11:34:16Reported by oracleType

cve🔗 web.nvd.nist.gov👁 259 Views🌐 2 Media mentions

Vulnerability in Java SE, Oracle GraalVM Enterprise Edition product allowing unauthorized partial DO

Reporter	Title	Published	Views	Family All 199
CNVD	Oracle Java SE and Oracle GraalVM Enterprise Edition Denial of Service Vulnerability (CNVD-2021-81808)	20 Oct 202100:00	–	cnvd
Prion	Code injection	20 Oct 202111:16	–	prion
RedhatCVE	CVE-2021-35559	19 Oct 202121:03	–	redhatcve
OSV	CVE-2021-35559	20 Oct 202111:16	–	osv
OSV	Red Hat Security Advisory: java-1.7.1-ibm security update	13 Sep 202420:33	–	osv
OSV	java-13-openjdk-13.0.9.0-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	Red Hat Security Advisory: java-1.8.0-ibm security update	13 Sep 202420:32	–	osv
OSV	Red Hat Security Advisory: java-1.8.0-ibm security update	13 Sep 202420:32	–	osv
OSV	Important: java-17-openjdk security update	9 Nov 202119:26	–	osv
OSV	Important: java-17-openjdk security update	9 Nov 202119:26	–	osv

Nvd

Vulners

Vulnrichment

Node

oracle graalvmMatch20.3.3enterprise

oracle graalvmMatch21.2.0enterprise

oracle openjdkMatch7update311

oracle openjdkMatch8update301

oracle openjdkMatch11.0.12

oracle openjdkMatch17

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp e-series_santricity_os_controllerRange11.0.0–11.50.2

netapp e-series_santricity_storage_managerMatch-

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp hci_management_nodeMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp santricity_unified_managerMatch-

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

netapp solidfireMatch-

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "vendor": "Oracle Corporation",
    "product": "Java SE JDK and JRE",
    "versions": [
      {
        "version": "Java SE:7u311",
        "status": "affected"
      },
      {
        "version": "Java SE:8u301",
        "status": "affected"
      },
      {
        "version": "Java SE:11.0.12",
        "status": "affected"
      },
      {
        "version": "Java SE:17",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:20.3.3",
        "status": "affected"
      },
      {
        "version": "Oracle GraalVM Enterprise Edition:21.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WTVCIVHTX3XONYOEGUMLKCM4QEC6INT/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTYZWIXDFUV2H57YQZJWPOD3BC3I3EIQ/
security	www.security.netapp.com/advisory/ntap-20240621-0006/
debian	www.debian.org/security/2021/dsa-5000
debian	www.debian.org/security/2021/dsa-5012
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXTUWAWXVU37GRNIG4TPMA47THO6VAE6/
security	www.security.gentoo.org/glsa/202209-05
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DJILEHYV2U37HKMGFEQ7CAVOV4DUWW2O/
lists	www.lists.debian.org/debian-lts-announce/2021/11/msg00008.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6EUURAQOIJYFZHQ7DFZCO6IKDPIAWTNK/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Oct 2021 11:16Current

5Medium risk

Vulners AI Score5

CVSS25

CVSS35.3

EPSS0.003

SSVC

CWE-400

cve-2021-35559 vulnerability java se oracle graalvm enterprise edition oracle java swing network access denial of service cvss 3.1