Denial Of Service (DoS)

2017-03-2305:36:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.025 Low

EPSS

Percentile

90.3%

JSON

Oracle Glassfish web-core is vulnerable to denial of service (DoS) attacks. The vulnerability exists because it allows the generation of the same hash value for all the values in the hash table, allowing it to cause hashtable collisions. Due to these hash table collisions, attackers can consume hours of CPU time with a single HTTP request, triggering denial of service attacks.

CPENameOperatorVersion
core servlet containereq10.0-b28
core servlet containerle3.0.1-b20
core servlet containerle3.1.1
core servlet containerle3.2-b05
embedded glassfish weble3.1.1
embedded glassfish weble3.0.1
embedded glassfish weble3.2-b05
java-1.6.0-ibmeq1.6.0.10.1__1jpp.5.el6_2
java-1.6.0-ibmeq1.6.0.9.1__1jpp.1.el5
java-1.6.0-ibmeq1.6.0.4__1jpp.1.el5

Name	Operator	Version
core servlet container	eq	10.0-b28
core servlet container	le	3.0.1-b20
core servlet container	le	3.1.1
core servlet container	le	3.2-b05
embedded glassfish web	le	3.1.1
embedded glassfish web	le	3.0.1
embedded glassfish web	le	3.2-b05
java-1.6.0-ibm	eq	1.6.0.10.1__1jpp.5.el6_2
java-1.6.0-ibm	eq	1.6.0.9.1__1jpp.1.el5
java-1.6.0-ibm	eq	1.6.0.4__1jpp.1.el5