Serialization Vulnerability in Oracle Java SE and GraalVM Products

CVE-2024-21217

Summary

A vulnerability has been identified in Oracle Java SE and GraalVM products that permits unauthenticated attackers to exploit the serialization component. This issue primarily affects users with network access, making it particularly concerning for systems using APIs to handle data. Successful exploitation could allow attackers to cause a partial denial of service (DoS) within the affected products. This vulnerability is relevant to environments where untrusted code is loaded, such as in sandboxed Java Web Start applications or applets, potentially compromising the integrity of the Java security model.

References