CVE Feed

    Dashboard / CVE / CVE-2024-27267

    CVE-2024-27267

    The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.

    Published:Aug 14, 2024
    Last Modified:Sep 29, 2025
    EPS:Aug 14, 2024
    EPSS Score:0.00029
    CVSS Score:5.9

    Affected Products

    Vendor
    Ibm
    Product
    Java Sdk
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-1417 (CVSS 8.1) — Under certain circumstances, a flaw in the J9 JVM (IBM SDK, Java Technology Edition 7.1 and 8.0) allows untrus…
    CVE-2016-0264 (CVSS 5.6) — Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.…
    CVE-2016-0376 (CVSS 8.1) — The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16…
    CVE-2016-0363 (CVSS 8.1) — The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25)…
    CVE-2015-5041 (CVSS 9.1) — The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, an…
    CVE-2015-5006 (CVSS 2.1) — IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before …
    CVE-2015-1931 (CVSS 5.5) — IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 be…
    CVE-2014-8892 (CVSS 7.8) — Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR1…
    CVE-2014-8891 (CVSS 10) — Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR1…
    CVE-2014-0878 (CVSS 5.8) — The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Techno…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High