Oracle Jdk Vulnerabilidad

Cronología

Versión

22.3.4	2
17.0.8	2
20.0.2	2
1.7.0	2
1.6.0	2

Contramedidas

Official Fix	10
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	1

Explotabilidad

High	4
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	6

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	11

Autenticación

Not Defined	0
High	0
Low	1
None	11

La interacción del usuario

Not Defined	0
Required	0
None	12

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	0
≤8	5
≤9	0
≤10	3

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	1
≤8	4
≤9	1
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	1
≤6	1
≤7	0
≤8	5
≤9	0
≤10	3

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	3
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	0
≤7	0
≤8	1
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	0
<5k	0
<10k	3
<25k	5
<50k	3
<100k	1
≥100k	0

Explotar hoy

<1k	7
<2k	1
<5k	3
<10k	1
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (15): 1.6, 1.7, 1.7.0_2, 1.7.0_4, 1.8, 6 Update 34, 7 Update 6, 17.0.8, 20.0.2, 21.0.1; Oracle GraalVM Enterprise Edition 20.3.12, 21.3.8, 22.3.4, Oracle GraalVM for JDK 17.0.9, Oracle GraalVM for JDK 17.0.9; Oracle GraalVM Enterprise Edition 21.3.8, Oracle GraalVM for JDK 21.0.1

Link to Product Website: https://www.oracle.com

Tipo de software: Programming Tool Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2024-01-16	3.7	3.6	Oracle GraalVM for JDK/GraalVM Enterprise Edition Compiler divulgación de información	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-20955
2024-01-16	7.5	7.3	Oracle GraalVM for JDK/GraalVM Enterprise Edition Tools denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-5072
2024-01-16	7.5	7.3	Oracle GraalVM for JDK Node denegación de servicio	$5k-$25k	$0-$5k	High	Official Fix	0.03	CVE-2023-44487
2023-10-17	4.8	4.7	Oracle GraalVM for JDK Compiler vulnerabilidad desconocida	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-22091
2023-10-17	7.5	7.3	Oracle GraalVM for JDK Node vulnerabilidad desconocida	$5k-$25k	$5k-$25k	Not Defined	Official Fix	0.00	CVE-2023-30589
2023-08-23	5.5	5.4	Oracle JDK/OpenJDK HotSpot VM make_block_at denegación de servicio	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-40433
2014-06-16	7.3	7.1	Oracle Java JDK JDWP desbordamiento de búfer	$25k-$100k	$0-$5k	High	Unavailable	0.00
2013-01-14	9.8	8.8	Oracle JDK escalada de privilegios	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-3174
2012-11-28	5.3	5.1	Oracle JDK cifrado débil	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-2739
2012-11-23	7.5	6.5	Oracle Java JDK/Open JDK MurmurHash Implementation cifrado débil	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2012-5373