CVE-2024-27267: 
IBM JDK vulnerability analysis and mitigation

The Object Request Broker (ORB) in IBM SDK, Java Technology Edition versions 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 contains a vulnerability identified as CVE-2024-27267. The vulnerability was discovered and disclosed in August 2024, affecting the ORB component's listener thread management system (NVD, CVE).

The vulnerability is caused by a race condition in the management of ORB listener threads. It has been assigned a CVSS v3.1 base score of 5.9 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating that it requires no privileges or user interaction to exploit, though it has high attack complexity (IBM Advisory).

If successfully exploited, this vulnerability can lead to a remote denial of service condition, potentially affecting the availability of the system. The impact is primarily focused on system availability, with no direct effect on confidentiality or integrity (NVD).

The vulnerability can be exploited remotely and requires no authentication or user interaction. However, the attack complexity is rated as high, suggesting that specific conditions need to be met for successful exploitation (IBM Advisory).

IBM has released fixes for this vulnerability in versions 7.1.5.23 and 8.0.8.30 of the IBM SDK, Java Technology Edition. The fix is also available through APAR number IX90197 (IBM Advisory).