The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ibm Aix | — | Apply the fix or workaround for java_nov2024_advisory | Nov 20, 2024 | Aug 14, 2024 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.5.23Upgrade IBM Java to version 8.0.8.30 | Aug 14, 2024 | Aug 14, 2024 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Aug 14, 2024 | Aug 14, 2024 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-src | Sep 20, 2024 | Aug 14, 2024 |
| Suse | — | Upgrade java-1_8_0-ibm-develUpgrade java-1_8_0-ibm-devel-32bitUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-ibm-demoUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-ibm-srcUpgrade java-1_8_0-ibmUpgrade java-1_8_0-ibm-32bit | Dec 5, 2025 | Sep 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub