Vulnerability in Oracle Database Server Java VM Could Lead to Partial Denial of Service
CVE-2024-21174

3.1LOW

Key Information:

Vendor

Oracle
Status
Database - Enterprise Edition
Vendor
CVE Published:
16 July 2024

What is CVE-2024-21174?

A vulnerability in the Java VM component of Oracle Database Server allows low privileged attackers to exploit network access. Required privileges include Create Session and Create Procedure, facilitating potential unauthorized actions within the database environment. Successful exploitation of this vulnerability can lead to a partial denial of service (DoS) affecting the Java VM, disrupting service availability for legitimate users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Database - Enterprise Edition 19.3 <= 19.23

Database - Enterprise Edition 21.3 <= 21.14

Database - Enterprise Edition 23.4

References

https://www.oracle.com/security-alerts/cpujul2024.html
vendor-advisory

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.