CVE-2024-27267 IBM SDK, Java Technology Edition denial of service

What is CVE-2024-27267?

CVE-2024-27267 is a medium-severity vulnerability in IBM SDK, Java Technology Edition, published on 14 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.

Weakness: CWE-362

Which versions are affected by CVE-2024-27267?

It affects 1 product.

Products include Ibm Java Sdk.

How do I fix CVE-2024-27267?

Apply the vendor's patch.

Is CVE-2024-27267 being exploited?

There is no known exploitation of CVE-2024-27267 in the wild and no public exploit code.

Other vulnerabilities in IBM SDK, Java Technology Edition

• CVE-2014-8891 Security feature bypass in n/a Critical 10.0
• CVE-2015-5041 Information disclosure in n/a Critical 9.1
• CVE-2018-1417 Privilege escalation in SDK, Java Technology Edition High 8.1
• CVE-2016-0363 Security feature bypass in n/a High 8.1
• CVE-2016-0376 Deserialization in n/a High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7p73-rpm9-rwr6, RHSA-2024:6595.