CVE Vulnerabilities

CVE-2019-2964

Published: Oct 16, 2019 | Modified: Oct 08, 2022
CVSS 3.x
3.7
LOW
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.7 LOW
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Ubuntu
MEDIUM

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected Software

Name Vendor Start Version End Version
Jdk Oracle 1.7.0-update231 (including) 1.7.0-update231 (including)
Jdk Oracle 1.8.0-update221 (including) 1.8.0-update221 (including)
Jdk Oracle 11.0.4 (including) 11.0.4 (including)
Jdk Oracle 13.0.0 (including) 13.0.0 (including)
Jre Oracle 1.7.0-update231 (including) 1.7.0-update231 (including)
Jre Oracle 1.8.0-update221 (including) 1.8.0-update221 (including)
Jre Oracle 11.0.4 (including) 11.0.4 (including)
Jre Oracle 13.0.0 (including) 13.0.0 (including)
Red Hat Enterprise Linux 6 RedHat java-1.8.0-openjdk-1:1.8.0.232.b09-1.el6_10 *
Red Hat Enterprise Linux 6 RedHat java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el6_10 *
Red Hat Enterprise Linux 6 Supplementary RedHat java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el6_10 *
Red Hat Enterprise Linux 6 Supplementary RedHat java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10 *
Red Hat Enterprise Linux 7 RedHat java-11-openjdk-1:11.0.5.10-0.el7_7 *
Red Hat Enterprise Linux 7 RedHat java-1.8.0-openjdk-1:1.8.0.232.b09-0.el7_7 *
Red Hat Enterprise Linux 7 RedHat java-1.7.0-openjdk-1:1.7.0.241-2.6.20.0.el7_7 *
Red Hat Enterprise Linux 7 Supplementary RedHat java-1.7.1-ibm-1:1.7.1.4.55-1jpp.1.el7 *
Red Hat Enterprise Linux 7 Supplementary RedHat java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el7 *
Red Hat Enterprise Linux 8 RedHat java-1.8.0-openjdk-1:1.8.0.232.b09-0.el8_0 *
Red Hat Enterprise Linux 8 RedHat java-11-openjdk-1:11.0.5.10-0.el8_0 *
Red Hat Enterprise Linux 8 RedHat java-1.8.0-ibm-1:1.8.0.6.0-3.el8_1 *
Red Hat Satellite 5.8 RedHat java-1.8.0-ibm-1:1.8.0.6.0-1jpp.1.el6_10 *
Openjdk-12 Ubuntu disco *
Openjdk-13 Ubuntu disco *
Openjdk-13 Ubuntu eoan *
Openjdk-13 Ubuntu esm-apps/focal *
Openjdk-13 Ubuntu focal *
Openjdk-13 Ubuntu groovy *
Openjdk-7 Ubuntu trusty *
Openjdk-8 Ubuntu bionic *
Openjdk-8 Ubuntu disco *
Openjdk-8 Ubuntu eoan *
Openjdk-8 Ubuntu trusty *
Openjdk-8 Ubuntu xenial *
Openjdk-lts Ubuntu bionic *
Openjdk-lts Ubuntu disco *
Openjdk-lts Ubuntu eoan *
Openjdk-lts Ubuntu trusty *
Openjdk-lts Ubuntu upstream *

References