CVE-2019-2684

MEDIUMMonitor

Published:Apr 23, 2019(7 years ago)

Modified:Nov 21, 2024

Remote ExploitNo Auth RequiredNo Interaction

Vulnerability Description

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).

Attack Characteristics

Network AccessHigh ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
oracle	jdk	-	-
oracle	jdk	-	-

Timeline

Published
CVE disclosed publicly
Apr 23, 20197 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007....Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058....Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059....Mailing List

CVSS Score

v3.1

5.9/ 10.0

MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

At a Glance

Affected Products

References

oracle / jdk

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013....Mailing List

http://www.openwall.com/lists/oss-security/2020/09/01/4Mailing List

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813...Patch

https://access.redhat.com/errata/RHBA-2019:0959Mailing List

https://access.redhat.com/errata/RHSA-2019:1146Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1163Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1164Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1165Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1166Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1238Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1325Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1518Third Party Advisory

https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d11173...

https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8...

https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5...

https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a5542...

https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a...

https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f...

https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c587369...

https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297...

https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09...

https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136...

https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c...

https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c8...

https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b3...

https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c11705241...

https://lists.debian.org/debian-lts-announce/2019/05/msg00011.htmlThird Party Advisory

https://seclists.org/bugtraq/2019/May/75Mailing List

https://security.gentoo.org/glsa/201908-10Third Party Advisory

https://support.f5.com/csp/article/K11175903?utm_source=f5support&amp%...

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=...Third Party Advisory

https://usn.ubuntu.com/3975-1/Third Party Advisory

https://www.debian.org/security/2019/dsa-4453Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007....Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058....Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059....Mailing List