CVE-2020-2581: Medium severity Oracle GraalVM vulnerability

Published Jan 15, 2020

Updated

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.3.0.2. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle GraalVM Enterprise Edition executes to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM Enterprise Edition. CVSS 3.0 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected Software

1 affected component

Oracle GraalVM=19.3.0.2

Event History

Jan 15, 2020

CVE Published

via MITRE·04:34 PM

Data Sourced

via MITRE·04:34 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2020-2581?

CVE-2020-2581 is classified as an easily exploitable vulnerability with a high severity rating.

How do I fix CVE-2020-2581?

To fix CVE-2020-2581, you should upgrade to the latest version of Oracle GraalVM that addresses this vulnerability.

Who is affected by CVE-2020-2581?

CVE-2020-2581 affects users of Oracle GraalVM Enterprise Edition version 19.3.0.2.

Can CVE-2020-2581 be exploited remotely?

Yes, CVE-2020-2581 can be exploited by an unauthenticated attacker who has access to the infrastructure.

What component is impacted by CVE-2020-2581?

CVE-2020-2581 impacts the LLVM Interpreter component of Oracle GraalVM Enterprise Edition.