[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2019-2602Date: (C)2019-06-18   (M)2024-04-19


Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
https://seclists.org/bugtraq/2019/May/75
DSA-4453
GLSA-201908-10
RHBA-2019:0959
RHSA-2019:1146
RHSA-2019:1163
RHSA-2019:1164
RHSA-2019:1165
RHSA-2019:1166
RHSA-2019:1238
RHSA-2019:1325
RHSA-2019:1518
USN-3975-1
https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html
http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://kc.mcafee.com/corporate/index?page=content&id=SB10285
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us
openSUSE-SU-2019:1327
openSUSE-SU-2019:1438
openSUSE-SU-2019:1439
openSUSE-SU-2019:1500

CWE    1
CWE-400
OVAL    54
oval:org.secpod.oval:def:89003340
oval:org.secpod.oval:def:505321
oval:org.secpod.oval:def:1000717
oval:org.secpod.oval:def:54967
...

© SecPod Technologies