Medium WID-SEC-2024-1648 7 CVEs

Azul Zulu: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jul 16, 2024 · Updated Nov 11, 2024 · Revision 2 · de-DE

Vendor: Azul Vendor: IBM Product: Java SDK Product: Zulu Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Azul Zulu ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Zulu ist eine freie Java-Implementierung von Azul Systems.

Vulnerabilities 7

High 8.2

CVE-2024-27983 Public exploit EPSS 84%

An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packet…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Apr 9, 2024
High 7.4

CVE-2024-21147

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Medium 4.8

CVE-2024-21140

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Medium 4.8

CVE-2024-21145

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21131

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21138

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024
Low 3.7

CVE-2024-21144

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrenc…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jul 16, 2024

Revision history

2024-11-11 #2
Neue Updates von IBM aufgenommen
2024-07-16 #1
Initiale Fassung

References

Azul Zulu builds of OpenJDK vom 2024-07-16
https://docs.azul.com/core/pdfs/july-2024/azul-zulu-ca-release-notes-july-2024-rev1.0.pdf
IBM Security Bulletin 6985269 vom 2024-11-11
https://aix.software.ibm.com/aix/efixes/security/java_nov2024_advisory.asc