CVE-2023-22051

Name of the Vulnerable Software and Affected Versions Oracle GraalVM Enterprise Edition versions 21.3.6, 22.3.2 Oracle GraalVM for JDK versions 17.0.7, 20.0.1

Description The issue is related to errors in processing input data in the GraalVM Compiler component of Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK. It allows an unauthenticated attacker with network access via multiple protocols to compromise the system, resulting in unauthorized read access to a subset of accessible data.

Recommendations For Oracle GraalVM Enterprise Edition version 21.3.6, update to a newer version to mitigate the risk. For Oracle GraalVM Enterprise Edition version 22.3.2, update to a newer version to mitigate the risk. For Oracle GraalVM for JDK version 17.0.7, update to a newer version to mitigate the risk. For Oracle GraalVM for JDK version 20.0.1, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the GraalVM Compiler component until a patch is available.