CVE-2024-27267CWE-362

IBM SDK, Java Technology Edition denial of service

Medium · published August 14, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-08-14T15:59Z
EPSS history
Timeline
  • 14 AUG 15:59Z
    IBM SDK, Java Technology Edition denial of service
    cvelistv5