Vulnerability in Oracle Java SE and GraalVM Enterprise Edition

CVE-2024-21144

Summary

A vulnerability exists in Oracle Java SE and GraalVM Enterprise Edition that can be exploited by an unauthenticated attacker with network access through various protocols. This vulnerability poses a risk primarily to Java deployments that operate in environments where untrusted code is executed, such as sandboxed Java Web Start applications and applets. The successful exploitation of this vulnerability could lead to a partial denial of service, compromising the availability of the affected products. It is crucial for users and administrators to assess their environments and apply necessary mitigations to safeguard against these risks.

References