The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The IBM SDK, Java Technology Edition's Object Request Broker (ORB) 7.1.0.0 through 7.1.5.21 and 8.0.0.0 through 8.0.8.21 is vulnerable to a denial of service attack in some circumstances due to improper enforcement of the JEP 290 MaxRef and MaxDepth deserialization filters. IBM X-Force ID: 260578.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-devel | Jun 28, 2024 | May 14, 2024 |
| Ibm Aix | — | Apply the fix or workaround for java_jun2024_advisory | Jun 25, 2024 | May 14, 2024 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.22Upgrade IBM Java to version 8.0.8.25 | Oct 20, 2026 | Oct 20, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | May 13, 2024 | May 13, 2024 |
| Redhat_linux | — | Upgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-pluginNo solution existsUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-jdbc | Jun 7, 2024 | May 14, 2024 |
| Suse | — | Upgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-32bitUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-demo | May 30, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub