OracleVULNRICHMENT:CVE-2019-2964CVE-2019-2964
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html
lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html
lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html
www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
access.redhat.com/errata/RHSA-2019:3134
access.redhat.com/errata/RHSA-2019:3135
access.redhat.com/errata/RHSA-2019:3136
access.redhat.com/errata/RHSA-2019:3157
access.redhat.com/errata/RHSA-2019:3158
access.redhat.com/errata/RHSA-2019:4109
access.redhat.com/errata/RHSA-2019:4110
access.redhat.com/errata/RHSA-2019:4113
access.redhat.com/errata/RHSA-2019:4115
access.redhat.com/errata/RHSA-2020:0006
access.redhat.com/errata/RHSA-2020:0046
lists.debian.org/debian-lts-announce/2019/12/msg00005.html
seclists.org/bugtraq/2019/Oct/27
seclists.org/bugtraq/2019/Oct/31
security.netapp.com/advisory/ntap-20191017-0001/
usn.ubuntu.com/4223-1/
www.debian.org/security/2019/dsa-4546
www.debian.org/security/2019/dsa-4548
Related
AI Score
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial