Remote Denial of Service in IBM SDK Java Technology Edition

CVE-2024-27267

What is CVE-2024-27267?

The Object Request Broker (ORB) within IBM SDK, Java Technology Edition versions 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is susceptible to a remote denial of service attack. This vulnerability arises from a race condition in the management of ORB listener threads, which may allow an attacker to disrupt service availability remotely. Organizations using the affected versions should implement appropriate mitigations and consider upgrading to secure versions.

References