Partial Denial of Service Vulnerability in Oracle GraalVM Enterprise Edition
CVE-2020-2581

4MEDIUM

Key Information:

Vendor
Oracle
Status
Graalvm Enterprise Edition
Vendor
CVE Published:
15 January 2020

Summary

An easily exploitable vulnerability has been identified in the LLVM Interpreter component of Oracle's GraalVM Enterprise Edition. This affects any infrastructure running version 19.3.0.2, allowing unauthenticated attackers who can log in to potentially disrupt service. Successful exploitation may lead to a partial denial of service, thereby affecting the availability of the affected product. Organizations using this version are strongly advised to assess their security posture and apply necessary mitigations.

Affected Version(s)

GraalVM Enterprise Edition 19.3.0.2

References

https://www.oracle.com/security-alerts/cpujan2020.html
x_refsource_MISC

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.