Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12428
HistoryJan 18, 2022 - 12:00 a.m.

KLA12428 DoS vulnerability in Oracle Java and GraalVM

2022-01-1800:00:00
Kaspersky Lab
threats.kaspersky.com
374

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

Denial of service vulnerability was found in Oracle Java and GraalVM. Malicious users can exploit this vulnerability to cause denial of service.

Original advisories

Oracle Critical Patch Update Advisory – January 2022

Related products

Oracle-Java-JRE-1.7.x

Oracle-Java-JRE-1.8.x

CVE list

CVE-2022-21349 high

Solution

Update to the latest version

Download Java

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Oracle GraalVM Enterprise Edition 20.x earlier than 20.3.5, 21.x earlier than 21.3.1Oracle Java SE 7.x earlier than 7u331, 8.x earlier than 8u321

Related

veracode 1
cbl_mariner 1
cnvd 1
cvelist 1
openvas 17
alpinelinux 1
redhatcve 1
f5 1
ubuntucve 1
prion 1
cve 1
debiancve 1
broadcom 2
ibm 42
nvd 1
osv 2
rosalinux 1
nessus 27
fedora 2
debian 1
suse 2
altlinux 1
amazon 3
redos 1
gentoo 1
cloudlinux 1
oracle 1
veracode
veracode
Denial Of Service (DoS)
2022-05-15 17:21:05
cbl_mariner
cbl_mariner
CVE-2022-21349 affecting package openjdk8 1.8.0.292-1
2022-03-10 23:47:38
cnvd
cnvd
Oracle GraalVM Input Validation Error Vulnerability (CNVD-2022-15474)
2022-01-24 00:00:00
cvelist
cvelist
CVE-2022-21349
2022-01-19 11:25:16
openvas
openvas
Oracle Java SE Security Update (jan2022) 01 - Linux
2022-01-19 00:00:00
Oracle OpenJDK Unspecified Vulnerability (CVE-2022-21349)
2022-01-19 00:00:00
Oracle Java SE Security Update (jan2022) 01 - Windows
2022-01-19 00:00:00
alpinelinux
alpinelinux
CVE-2022-21349
2022-01-19 12:15:15
redhatcve
redhatcve
CVE-2022-21349
2022-01-26 14:46:54
f5
f5
K40293611 : Oracle Java SE vulnerability CVE-2022-21349
2022-03-28 00:00:00
ubuntucve
ubuntucve
CVE-2022-21349
2022-01-19 00:00:00
prion
prion
Buffer overflow
2022-01-19 12:15:00
cve
cve
CVE-2022-21349
2022-01-19 12:15:15
debiancve
debiancve
CVE-2022-21349
2022-01-19 12:15:15
broadcom
broadcom
BSA-2022-1729
2022-07-14 00:00:00
Azul Zulu Java Multiple Vulnerabilities (Jan 2022 Java update) CVE-2022-21248 CVE-2022-21277 CVE-2022-21366 CVE-2022-21282 CVE-2022-21296 CVE-2022-21283 CVE-2022-21291 CVE-2022-21305 CVE-2022-21293 CVE-2022-21294 CVE-2022-21340 CVE-2022-21299 CVE-2022-21341 CVE-2022-21349 CVE-2022-21360 CVE-2022-21365
2023-08-29 00:00:00
ibm
ibm
Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer operands are vulnerable to denial of service due to [CVE-2022-21349]
2023-07-25 13:44:46
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to an unspecified vulnerability in Java SE ( CVE-2022-21294)
2022-05-07 20:42:10
Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager (TADDM) is vulnerable to denial of service
2022-04-25 15:54:22
nvd
nvd
CVE-2022-21349
2022-01-19 12:15:15
osv
osv
CVE-2022-21349
2022-01-19 12:15:15
openjdk-8 - security update
2022-02-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2315
2023-12-19 12:25:07
nessus
nessus
EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2022-1732)
2022-05-30 00:00:00
IBM Java 7.0 < 7.0.11.5 / 7.1 < 7.1.5.5 / 8.0 < 8.0.7.5 Multiple Vulnerabilities
2022-04-29 00:00:00
EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2022-1733)
2022-05-26 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: java-1.8.0-openjdk-1.8.0.322.b06-2.fc35
2022-02-11 01:23:37
[SECURITY] Fedora 34 Update: java-1.8.0-openjdk-1.8.0.322.b06-2.fc34
2022-02-11 01:11:34
debian
debian
[SECURITY] [DLA 2917-1] openjdk-8 security update
2022-02-10 08:51:22
suse
suse
Security update for java-1_8_0-openjdk (important)
2022-03-16 00:00:00
Security update for java-1_8_0-ibm (important)
2022-03-29 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package java-1.8.0-openjdk version 0:1.8.0.322.b06-alt2_1jpp8
2022-04-07 00:00:00
amazon
amazon
Important: java-1.8.0-openjdk
2022-08-15 18:37:00
Important: java-1.7.0-openjdk
2022-09-01 21:09:00
Important: java-1.7.0-openjdk
2022-09-01 17:24:00
redos
redos
ROS-20240424-01
2024-04-24 00:00:00
gentoo
gentoo
OpenJDK: Multiple Vulnerabilities
2022-09-07 00:00:00
cloudlinux
cloudlinux
Fixed 50 CVEs in java-1.7.0-openjdk
2022-08-22 13:56:04
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON
Related for KLA12428
veracode1cbl_mariner1cnvd1cvelist1openvas17alpinelinux1redhatcve1f51ubuntucve1prion1cve1debiancve1broadcom2ibm42nvd1osv2rosalinux1nessus27fedora2debian1suse2altlinux1amazon3redos1gentoo1cloudlinux1oracle1