--- title: "CVE-2025-30752\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2025-30752?format=md keywords: index, follow --- # CVE-2025-30752 Publication date 15 July 2025 Last updated 22 August 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **3.7 · Low** [Score breakdown](https://ubuntu.com/security/CVE-2025-30752?format=md#impact-score) Toggle side navigation ## Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L). [Read the notes from the security team](https://ubuntu.com/security/CVE-2025-30752?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | openjdk-13 | 25.10 questing | Not in release | | 25.04 plucky | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by openjdk-17 | | openjdk-16 | 25.10 questing | Not in release | | 25.04 plucky | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by openjdk-17 | | openjdk-17 | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not affected | | openjdk-17-crac | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | openjdk-18 | 25.10 questing | Not in release | | 25.04 plucky | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by openjdk-19 | | openjdk-19 | 25.10 questing | Not in release | | 25.04 plucky | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | openjdk-21 | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | openjdk-21-crac | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | openjdk-24 | 25.10 questing | Not in release | | 25.04 plucky | Ignored end of life, was needs-triage | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | openjdk-25 | 25.10 questing | Not affected | | 25.04 plucky | Ignored end of life, was needs-triage | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | openjdk-8 | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not affected | | 16.04 LTS xenial | Not affected | | openjdk-9 | 25.10 questing | Not in release | | 25.04 plucky | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 16.04 LTS xenial | Ignored end of ESM support, was ignored [no longer supported by upstream] | | openjdk-lts | 25.10 questing | Not affected | | 25.04 plucky | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not affected | | 20.04 LTS focal | Not affected | | 18.04 LTS bionic | Not affected | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [mdeslaur](https://launchpad.net/~mdeslaur) only affects 24.x ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 3.7 · Low * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Network | | Attack complexity | High | | Privileges required | None | | User interaction | None | | Scope | Unchanged | | Confidentiality impact | None | | Integrity impact | None | | Availability impact | Low | * Scores | Parameter | Value | | --- | --- | | Base score | 3.7 · Low | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30752) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2025-30752) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2025-30752) * [Debian](https://security-tracker.debian.org/tracker/CVE-2025-30752) ### Other references * *