CVE-2019-2762

Опубликовано: 23 июл. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Patch
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2494
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2495
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2585
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2590
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2592
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2737
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10300
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00020.html
Mailing List
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us
Third Party Advisory
https://usn.ubuntu.com/4080-1/
Third Party Advisory
https://usn.ubuntu.com/4083-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Patch
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:2494
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2495
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2585
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:jdk:1.7.0:update221:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:update211:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:11.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:12.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update221:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:update211:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:11.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:12.0.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*

Конфигурация 7

cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*

Версия до 8.7.0-00 (исключая)

EPSS

Процентиль: 73%

0.00771

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-2762

CVSS3: 5.3

ubuntu

больше 6 лет назад

CVE-2019-2762

CVSS3: 5.3

redhat

больше 6 лет назад

CVE-2019-2762

CVSS3: 5.3

debian

больше 6 лет назад

Vulnerability in the Java SE, Java SE Embedded component of Oracle Jav ...

GHSA-h4f9-wrfv-243r

CVSS3: 5.3

github

больше 3 лет назад

BDU:2019-03607

CVSS3: 5.3

fstec

больше 6 лет назад

Уязвимость компонента Utilities программных платформ Java SE, Java SE Embedded, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 73%

0.00771

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo