Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240927-03
HistorySep 27, 2024 - 12:00 a.m.

ROS-20240927-03

2024-09-2700:00:00
redos.red-soft.ru
oracle
java se
graalvm enterprise
input validation
denial of service
vulnerability
exploitation

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.5

Confidence

Low

JSON

A vulnerability in the Concurrency component of the Oracle Java SE and Oracle GraalVM Enterprise Edition software platforms is related to insufficient input validation.
Edition is related to insufficient validation of input data. Exploitation of the vulnerability could allow
an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64java-11-openjdk< 11.0.24.0.8-2UNKNOWN

Related

osv 16
cve 1
ibm 51
vulnrichment 1
nvd 1
cgr 1
debiancve 1
cvelist 1
alpinelinux 1
ubuntucve 1
wolfi 1
nessus 41
openvas 17
redhatcve 1
aix 1
rocky 2
redhat 14
ubuntu 2
oraclelinux 4
almalinux 2
debian 2
f5 1
amazon 2
mageia 1
kaspersky 1
atlassian 1
oracle 1
osv
osv
CGA-v7hg-3r5x-6mvg
2024-06-06 12:26:25
CGA-g6p4-m46f-4jmh
2024-06-06 12:25:57
CGA-2f43-p59r-5jv4
2024-06-06 12:20:56
cve
cve
CVE-2024-21085
2024-04-16 22:15:28
ibm
ibm
Security Bulletin: IBM MQ is affected by a vulnerability in the IBM Runtime Environment, Java Technology Edition (CVE-2024-21085)
2024-06-27 00:28:32
Security Bulletin: IBM MQ Explorer is affected by a vulnerability in the IBM Semeru Runtime (CVE-2024-21085)
2024-09-05 21:35:39
Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester / DevOps Test UI
2024-06-12 06:36:19
vulnrichment
vulnrichment
CVE-2024-21085
2024-04-16 21:26:27
nvd
nvd
CVE-2024-21085
2024-04-16 22:15:28
cgr
cgr
CVE-2024-21085 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2024-21085
2024-04-16 22:15:28
cvelist
cvelist
CVE-2024-21085
2024-04-16 21:26:27
alpinelinux
alpinelinux
CVE-2024-21085
2024-04-16 22:15:28
ubuntucve
ubuntucve
CVE-2024-21085
2024-04-16 00:00:00
wolfi
wolfi
CVE-2024-21085 vulnerabilities
2024-09-28 03:12:04
nessus
nessus
IBM MQ 9.0 <= 9.0.0.26 / 9.1 <= 9.1.0.22 / 9.2 <= 9.2.0.26 / 9.3 < 9.3.0.20 LTS / 9.3 < 9.4 CD (7157980)
2024-06-27 00:00:00
IBM MQ 9.3 CD / 9.4 CD (7167215)
2024-09-09 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : java-1_8_0-openjdk (SUSE-SU-2024:1451-1)
2024-04-29 00:00:00
openvas
openvas
Oracle Java SE Security Update (Apr 2024) -03 - Linux
2024-04-18 00:00:00
Oracle OpenJDK 8.x - 11.x Vulnerability (Apr 2024)
2024-04-18 00:00:00
Oracle Java SE Security Update (Apr 2024) -03 - Windows
2024-04-18 00:00:00
redhatcve
redhatcve
CVE-2024-21085
2024-04-17 18:53:55
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 15:10:30
rocky
rocky
java-1.8.0-openjdk security update
2024-05-06 13:04:21
java-11-openjdk security update
2024-05-06 13:04:21
redhat
redhat
(RHSA-2024:1815) Moderate: OpenJDK 8u412 Security Update for Portable Linux Builds
2024-04-17 11:38:38
(RHSA-2024:1817) Moderate: java-1.8.0-openjdk security update
2024-04-16 21:02:40
(RHSA-2024:1816) Moderate: OpenJDK 8u412 Windows Security Update
2024-04-17 11:38:35
ubuntu
ubuntu
OpenJDK 8 vulnerabilities
2024-06-06 00:00:00
OpenJDK 11 vulnerabilities
2024-06-06 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2024-04-23 00:00:00
java-1.8.0-openjdk security update
2024-04-17 00:00:00
java-11-openjdk security update
2024-04-22 00:00:00
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
debian
debian
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
f5
f5
K000139377 : OpenJDK vulnerabilities CVE-2024-21011, CVE-2024-21012, CVE-2024-21068, CVE-2024-21085, and CVE-2024-21094
2024-04-23 00:00:00
amazon
amazon
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
mageia
mageia
Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities
2024-05-16 20:29:32
kaspersky
kaspersky
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-04-16 00:00:00
atlassian
atlassian
Third-Party Dependency in Confluence Data Center and Server
2024-07-11 00:01:19
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.5

Confidence

Low

JSON
Related for ROS-20240927-03
osv16cve1ibm51vulnrichment1nvd1cgr1debiancve1cvelist1alpinelinux1ubuntucve1wolfi1nessus41openvas17redhatcve1aix1rocky2redhat14ubuntu2oraclelinux4almalinux2debian2f51amazon2mageia1kaspersky1atlassian1oracle1