CVE-2018-1517

Опубликовано: 20 авг. 2018

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10719653
Vendor Advisory
http://www.securityfocus.com/bid/105117
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2568
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2569
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2575
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2576
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2712
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2713
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10719653
Vendor Advisory
http://www.securityfocus.com/bid/105117
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2568
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2569
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2575
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2576
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2712
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2713
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:software_development_kit:6:service_refresh_16:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:6.0:*:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:6r1:service_refresh_8:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:7:service_refresh_10:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:7.0:*:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:7r1:service_refresh_4:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:8:service_refresh_5:*:*:java_technology:*:*:*

cpe:2.3:a:ibm:software_development_kit:8.0:*:*:*:java_technology:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*

cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*

cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00588

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2018-1517

CVSS3: 5.9

ubuntu

больше 7 лет назад

CVE-2018-1517

CVSS3: 7.5

redhat

больше 7 лет назад

GHSA-m9w3-gv68-h6xv

CVSS3: 7.5

github

больше 3 лет назад

SUSE-SU-2018:2649-2

suse-cvrf

больше 7 лет назад

Security update for java-1_7_1-ibm

SUSE-SU-2018:2649-1

suse-cvrf

больше 7 лет назад

Security update for java-1_7_1-ibm

EPSS

Процентиль: 69%

0.00588

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-20