Oracle Database Server Java VM Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Java VM component of Oracle Database Server. This issue affects versions 19.3 through 19.29 and 21.3 through 21.20. The vulnerability is easily exploitable by a high-privileged attacker with Authenticated User rights and network access via Oracle Net. Exploitation requires human interaction from a third party. Successful attacks can lead to a complete hang or a frequently repeatable crash of the Java VM.

Impact

Exploitation of this vulnerability can cause a complete hang or a frequently repeatable crash of the Java VM, leading to a denial-of-service condition.