REDHAT-BUG-2278636: Low severity Oracle GraalVM for JDK vulnerability
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
https://www.oracle.com/security-alerts/cpuapr2024.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2278636?
The severity of REDHAT-BUG-2278636 is categorized as high due to potential exploitation leading to critical impacts.
How do I fix REDHAT-BUG-2278636?
To fix REDHAT-BUG-2278636, upgrade to the patched versions of Oracle GraalVM for JDK or Oracle GraalVM Enterprise Edition as specified in the advisory.
Which versions are affected by REDHAT-BUG-2278636?
Affected versions for REDHAT-BUG-2278636 include Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22 and Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9.
What components are impacted in REDHAT-BUG-2278636?
The component impacted in REDHAT-BUG-2278636 is the Compiler of Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition.
Is it easy to exploit REDHAT-BUG-2278636?
REDHAT-BUG-2278636 is described as difficult to exploit, but mitigation measures are still recommended to protect systems.