Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240927-04
HistorySep 27, 2024 - 12:00 a.m.

ROS-20240927-04

2024-09-2700:00:00
redos.red-soft.ru
oracle
hotspot component
graalvm
memory boundary
remote access
data manipulation

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

7

Confidence

Low

JSON

A vulnerability in the Hotspot component of the Oracle Java SE software platform, Oracle GraalVM virtual machines
Enterprise Edition and Oracle GraalVM for JDK is related to writes beyond buffer boundaries in memory. Exploitation of the
of the vulnerability could allow an attacker acting remotely to gain access to modify, add
or delete data

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64java-11-openjdk< 11.0.22.0.7-1UNKNOWN

Related

ubuntucve 1
osv 25
openvas 21
cgr 1
debiancve 1
cvelist 1
nvd 1
alpinelinux 1
vulnrichment 1
redhatcve 1
cve 1
wolfi 1
ibm 38
nessus 49
rocky 2
almalinux 3
amazon 3
redhat 21
oraclelinux 5
debian 3
ubuntu 4
f5 1
mageia 1
kaspersky 1
atlassian 1
oracle 1
ubuntucve
ubuntucve
CVE-2024-21094
2024-04-16 00:00:00
osv
osv
CGA-6j7w-mgpr-7fwp
2024-06-06 12:24:35
CGA-vcmj-g429-534x
2024-06-06 12:29:31
CGA-f5w4-73pp-wcxj
2024-06-06 12:27:03
openvas
openvas
Oracle OpenJDK 8.x - 21.x Vulnerability (Apr 2024)
2024-04-18 00:00:00
Oracle Java SE Security Update (Apr 2024) -01 - Linux
2024-04-18 00:00:00
Oracle Java SE Security Update (Apr 2024) -01 - Windows
2024-04-18 00:00:00
cgr
cgr
CVE-2024-21094 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2024-21094
2024-04-16 22:15:29
cvelist
cvelist
CVE-2024-21094
2024-04-16 21:26:30
nvd
nvd
CVE-2024-21094
2024-04-16 22:15:29
alpinelinux
alpinelinux
CVE-2024-21094
2024-04-16 22:15:29
vulnrichment
vulnrichment
CVE-2024-21094
2024-04-16 21:26:30
redhatcve
redhatcve
CVE-2024-21094
2024-04-17 18:54:06
cve
cve
CVE-2024-21094
2024-04-16 22:15:29
wolfi
wolfi
CVE-2024-21094 vulnerabilities
2024-09-28 03:12:04
ibm
ibm
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications
2024-09-27 07:29:52
Security Bulletin: Security Vulnerabilities in the IBM Java SE were fixed in the IBM Security Directory Integrator (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264)
2024-07-23 22:39:28
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264)
2024-05-21 19:42:39
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : java-1_8_0-openjdk (SUSE-SU-2024:1451-1)
2024-04-29 00:00:00
IBM Java 7.1 < 7.1.5.22 / 8.0 < 8.0.8.25 Multiple Vulnerabilities
2024-05-09 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : OpenJDK 21 vulnerabilities (USN-6813-1)
2024-06-06 00:00:00
rocky
rocky
java-1.8.0-openjdk security update
2024-05-06 13:04:21
java-11-openjdk security update
2024-05-06 13:04:21
almalinux
almalinux
Moderate: java-17-openjdk security update
2024-04-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
amazon
amazon
Low: java-17-amazon-corretto
2024-04-24 22:15:00
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
redhat
redhat
(RHSA-2024:1815) Moderate: OpenJDK 8u412 Security Update for Portable Linux Builds
2024-04-17 11:38:38
(RHSA-2024:1824) Moderate: OpenJDK 17.0.11 Security Update for Windows Builds
2024-04-17 11:47:22
(RHSA-2024:1825) Moderate: java-17-openjdk security update
2024-04-18 00:58:08
oraclelinux
oraclelinux
java-17-openjdk security update
2024-04-22 00:00:00
java-1.8.0-openjdk security update
2024-04-23 00:00:00
java-1.8.0-openjdk security update
2024-04-17 00:00:00
debian
debian
[SECURITY] [DSA 5672-1] openjdk-17 security update
2024-04-22 14:23:20
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
ubuntu
ubuntu
OpenJDK 17 vulnerabilities
2024-06-06 00:00:00
OpenJDK 8 vulnerabilities
2024-06-06 00:00:00
OpenJDK 21 vulnerabilities
2024-06-06 00:00:00
f5
f5
K000139377 : OpenJDK vulnerabilities CVE-2024-21011, CVE-2024-21012, CVE-2024-21068, CVE-2024-21085, and CVE-2024-21094
2024-04-23 00:00:00
mageia
mageia
Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities
2024-05-16 20:29:32
kaspersky
kaspersky
KLA65636 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-04-16 00:00:00
atlassian
atlassian
Third-Party Dependency in Confluence Data Center and Server
2024-07-11 00:01:19
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

7

Confidence

Low

JSON
Related for ROS-20240927-04
ubuntucve1osv25openvas21cgr1debiancve1cvelist1nvd1alpinelinux1vulnrichment1redhatcve1cve1wolfi1ibm38nessus49rocky2almalinux3amazon3redhat21oraclelinux5debian3ubuntu4f51mageia1kaspersky1atlassian1oracle1