REDHAT-BUG-2278636
First published: Thu May 02 2024(Updated: )
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). <a href="https://www.oracle.com/security-alerts/cpuapr2024.html">https://www.oracle.com/security-alerts/cpuapr2024.html</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle GraalVM for JDK | ||
| Oracle GraalVM Enterprise Edition |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2278636?
The severity of REDHAT-BUG-2278636 is categorized as high due to potential exploitation leading to critical impacts.
How do I fix REDHAT-BUG-2278636?
To fix REDHAT-BUG-2278636, upgrade to the patched versions of Oracle GraalVM for JDK or Oracle GraalVM Enterprise Edition as specified in the advisory.
Which versions are affected by REDHAT-BUG-2278636?
Affected versions for REDHAT-BUG-2278636 include Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22 and Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9.
What components are impacted in REDHAT-BUG-2278636?
The component impacted in REDHAT-BUG-2278636 is the Compiler of Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition.
Is it easy to exploit REDHAT-BUG-2278636?
REDHAT-BUG-2278636 is described as difficult to exploit, but mitigation measures are still recommended to protect systems.
- agent/severity
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/tags
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-20954
- vendor/oracle
- canonical/oracle graalvm for jdk
- canonical/oracle graalvm enterprise edition