REDHAT-BUG-2278674: Low severity Oracle GraalVM for JDK vulnerability
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2278674?
The severity of REDHAT-BUG-2278674 is classified as difficult to exploit.
How do I fix REDHAT-BUG-2278674?
To fix REDHAT-BUG-2278674, update Oracle GraalVM for JDK or Oracle GraalVM Enterprise Edition to a patched version.
Which versions are affected by REDHAT-BUG-2278674?
Affected versions of REDHAT-BUG-2278674 include Oracle GraalVM for JDK 17.0.10 to 22 and Oracle GraalVM Enterprise Edition 20.3.13 to 21.3.9.
What components are impacted in REDHAT-BUG-2278674?
The impacted component in REDHAT-BUG-2278674 is the Compiler of Oracle GraalVM.
Who is the vendor for REDHAT-BUG-2278674?
The vendor for REDHAT-BUG-2278674 is Oracle.