CVE-2022-21283

What it actually does

Flaw in the Libraries component permits an unauthenticated network attacker to trigger a partial denial of service condition against affected Java runtimes.

Why it matters to the business

Brief service interruptions for Java-dependent applications and workloads, increasing operational overhead especially in environments that process untrusted code or expose APIs.

How an attack unfolds

An attacker sends specially crafted data over supported network protocols or directly through component APIs to the vulnerable Libraries code, causing the partial DoS without authentication or user interaction.

How to fix it

Upgrade Oracle Java SE to a version later than 11.0.13 and 17.0.1, and Oracle GraalVM Enterprise Edition to a version later than 20.3.4 and 21.3.0. Apply the latest cumulative patches from Oracle and rebuild any downstream packages that embed the vulnerable runtime.

How to confirm the fix worked

Confirm runtime versions match or exceed the fixed releases, test sandboxed applets and API endpoints for continued availability under load, and review Oracle CPU release notes for the specific component fix.

Typical attack path

1. Locate internet-facing or API-accessible Java deployments running the affected versions
2. Craft input that targets the Libraries component
3. Deliver the input via multiple protocols or internal APIs
4. Trigger resource exhaustion leading to partial service denial

How to detect it

Review application and system logs for sudden partial service unavailability tied to Java processes, monitor network flows for unexpected protocol traffic to Java endpoints, and correlate with sandbox execution of untrusted code.

What your security team should do

• Prioritize patching of all exposed Java SE and GraalVM instances within the next maintenance window
• Restrict unauthenticated network access to Java services where feasible
• Enable logging of API calls and network traffic to the Libraries component for anomaly detection