CVE-2018-2799

MEDIUMMonitor

Published:Apr 19, 2018(8 years ago)

Modified:Nov 21, 2024

Remote ExploitNo Auth RequiredNo InteractionLow Complexity

Vulnerability Description

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
oracle	jdk	-	-
oracle	jdk	-	-

Timeline

Published
CVE disclosed publicly
Apr 19, 20188 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067...Patch
http://www.securityfocus.com/bid/103872Broken Link
http://www.securitytracker.com/id/1040697Broken Link

CVSS Score

v3.1

5.3/ 10.0

MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

At a Glance

Affected Products

References

oracle / jdk

https://access.redhat.com/errata/RHSA-2018:1188Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1191Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1201Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1202Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1204Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1206Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1270Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1278Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1721Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1722Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1723Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1724Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1974Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:1975Third Party Advisory

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+...Third Party Advisory

https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9a...Issue Tracking

https://lists.apache.org/thread.html/b53d4601ecd9ec63c799dbe1bc5b78e0d...Mailing List

https://lists.apache.org/thread.html/r449b5d89c7b2ba3762584cf6c38e0186...Mailing List

https://security.gentoo.org/glsa/201903-14Third Party Advisory

https://security.netapp.com/advisory/ntap-20180419-0001/Third Party Advisory

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://usn.ubuntu.com/3644-1/Third Party Advisory

https://usn.ubuntu.com/3691-1/Third Party Advisory

https://www.debian.org/security/2018/dsa-4185Third Party Advisory

https://www.debian.org/security/2018/dsa-4225Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067...Patch

http://www.securityfocus.com/bid/103872Broken Link

http://www.securitytracker.com/id/1040697Broken Link