The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jdk | Sun | 1.5.0-update10 (including) | 1.5.0-update10 (including) |
| Jdk | Sun | 1.5.0-update11 (including) | 1.5.0-update11 (including) |
| Jdk | Sun | 1.5.0-update7 (including) | 1.5.0-update7 (including) |
| Jdk | Sun | 1.5.0-update8 (including) | 1.5.0-update8 (including) |
| Jdk | Sun | 1.5.0-update9 (including) | 1.5.0-update9 (including) |
| Jdk | Sun | 1.6.0-update1 (including) | 1.6.0-update1 (including) |
| Jre | Sun | 1.4.2_11 (including) | 1.4.2_11 (including) |
| Jre | Sun | 1.4.2_12 (including) | 1.4.2_12 (including) |
| Jre | Sun | 1.4.2_13 (including) | 1.4.2_13 (including) |
| Jre | Sun | 1.4.2_14 (including) | 1.4.2_14 (including) |
| Jre | Sun | 1.5.0-update10 (including) | 1.5.0-update10 (including) |
| Jre | Sun | 1.5.0-update11 (including) | 1.5.0-update11 (including) |
| Jre | Sun | 1.5.0-update7 (including) | 1.5.0-update7 (including) |
| Jre | Sun | 1.5.0-update8 (including) | 1.5.0-update8 (including) |
| Jre | Sun | 1.5.0-update9 (including) | 1.5.0-update9 (including) |
| Jre | Sun | 1.6.0-update_1 (including) | 1.6.0-update_1 (including) |
| Sdk | Sun | 1.4.2_11 (including) | 1.4.2_11 (including) |
| Sdk | Sun | 1.4.2_12 (including) | 1.4.2_12 (including) |
| Sdk | Sun | 1.4.2_13 (including) | 1.4.2_13 (including) |
| Sdk | Sun | 1.4.2_14 (including) | 1.4.2_14 (including) |
| Extras for RHEL 3 | RedHat | java-1.4.2-bea-0:1.4.2.16-1jpp.1.el3 | * |
| Extras for RHEL 3 | RedHat | java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3 | * |
| Extras for RHEL 4 | RedHat | java-1.5.0-sun-0:1.5.0.12-1jpp.2.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.4.2-bea-0:1.4.2.15-1jpp.2.el4 | * |
| Extras for RHEL 4 | RedHat | java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.5.0-bea-0:1.5.0.11-1jpp.1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.4.2-bea-0:1.4.2.16-1jpp.1.el5 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el5 | * |
| Sun-java5 | Ubuntu | dapper | * |
| Sun-java5 | Ubuntu | edgy | * |
| Sun-java5 | Ubuntu | feisty | * |
| Sun-java5 | Ubuntu | gutsy | * |
| Sun-java5 | Ubuntu | hardy | * |
| Sun-java5 | Ubuntu | intrepid | * |
| Sun-java5 | Ubuntu | jaunty | * |