CVE-2024-27267

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads. IBM X-Force ID: 284573.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:java_sdk:*:*:*:*:java_technology:*:*:*
cpe:2.3:a:ibm:java_sdk:*:*:*:*:java_technology:*:*:*

History

11 Sep 2024, 13:48

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/284573 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/284573 - Vendor Advisory
References () https://www.ibm.com/support/pages/node/7165421 - () https://www.ibm.com/support/pages/node/7165421 - Vendor Advisory
CPE cpe:2.3:a:ibm:java_sdk:*:*:*:*:java_technology:*:*:*
Summary
  • (es) El Object Request Broker (ORB) en IBM SDK, Java Technology Edition 7.1.0.0 a 7.1.5.18 y 8.0.0.0 a 8.0.8.26 es vulnerable a la denegación remota de servicio, provocada por una condición de ejecución en la gestión de subprocesos de escucha de ORB. ID de IBM X-Force: 284573.
CWE NVD-CWE-noinfo
First Time Ibm
Ibm java Sdk

14 Aug 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-14 16:15

Updated : 2024-09-11 13:48


NVD link : CVE-2024-27267

Mitre link : CVE-2024-27267

CVE.ORG link : CVE-2024-27267


JSON object : View

Products Affected

ibm

  • java_sdk
CWE
NVD-CWE-noinfo CWE-300

Channel Accessible by Non-Endpoint