Test ID:	1.3.6.1.4.1.25623.1.0.832955
Category:	General
Title:	Oracle Java SE Security Update (Apr 2024) -03 - Windows
Summary:	Oracle Java SE is prone to a denial of; service vulnerability.
Description:	Summary: Oracle Java SE is prone to a denial of service vulnerability. Vulnerability Insight: The flaw exists due to a NativeUnpack class did not properly validate the memory size when allocating a buffer. Vulnerability Impact: Successful exploitation allows an attacker to cause a partial denial of service (partial DOS) Affected Software/OS: Oracle Java SE 8u401 and prior and 11.0.x through 11.0.22 on Windows. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-21085 Oracle Advisory https://www.oracle.com/security-alerts/cpuapr2024.html https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.