CVE Vulnerabilities

CVE-2020-2654

Published: Jan 15, 2020 | Modified: Mar 04, 2021
CVSS 3.x
3.7
LOW
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.7 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Ubuntu
LOW

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected Software

Name Vendor Start Version End Version
Jdk Oracle 1.7.0-update241 (including) 1.7.0-update241 (including)
Jdk Oracle 1.8.0-update231 (including) 1.8.0-update231 (including)
Jdk Oracle 11.0.5 (including) 11.0.5 (including)
Jdk Oracle 13.0.1 (including) 13.0.1 (including)
Jre Oracle 1.7.0-update_241 (including) 1.7.0-update_241 (including)
Jre Oracle 1.8.0-update_231 (including) 1.8.0-update_231 (including)
Jre Oracle 11.0.5 (including) 11.0.5 (including)
Jre Oracle 13.0.1 (including) 13.0.1 (including)
Red Hat Enterprise Linux 6 RedHat java-1.8.0-openjdk-1:1.8.0.242.b07-1.el6_10 *
Red Hat Enterprise Linux 6 RedHat java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el6_10 *
Red Hat Enterprise Linux 6 Supplementary RedHat java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el6_10 *
Red Hat Enterprise Linux 6 Supplementary RedHat java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el6_10 *
Red Hat Enterprise Linux 7 RedHat java-11-openjdk-1:11.0.6.10-1.el7_7 *
Red Hat Enterprise Linux 7 RedHat java-1.8.0-openjdk-1:1.8.0.242.b08-0.el7_7 *
Red Hat Enterprise Linux 7 RedHat java-1.7.0-openjdk-1:1.7.0.251-2.6.21.0.el7_7 *
Red Hat Enterprise Linux 7 Supplementary RedHat java-1.8.0-ibm-1:1.8.0.6.10-1jpp.1.el7 *
Red Hat Enterprise Linux 7 Supplementary RedHat java-1.7.1-ibm-1:1.7.1.4.65-1jpp.1.el7 *
Red Hat Enterprise Linux 8 RedHat java-11-openjdk-1:11.0.6.10-0.el8_1 *
Red Hat Enterprise Linux 8 RedHat java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_1 *
Red Hat Enterprise Linux 8 RedHat java-1.8.0-ibm-1:1.8.0.6.10-1.el8_2 *
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions RedHat java-1.8.0-openjdk-1:1.8.0.242.b08-0.el8_0 *
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions RedHat java-11-openjdk-1:11.0.6.10-0.el8_0 *
Icedtea-web Ubuntu bionic *
Icedtea-web Ubuntu disco *
Icedtea-web Ubuntu eoan *
Icedtea-web Ubuntu groovy *
Icedtea-web Ubuntu hirsute *
Icedtea-web Ubuntu impish *
Icedtea-web Ubuntu kinetic *
Icedtea-web Ubuntu lunar *
Icedtea-web Ubuntu mantic *
Icedtea-web Ubuntu trusty *
Icedtea-web Ubuntu xenial *
Openjdk-12 Ubuntu disco *
Openjdk-13 Ubuntu disco *
Openjdk-13 Ubuntu eoan *
Openjdk-8 Ubuntu bionic *
Openjdk-8 Ubuntu disco *
Openjdk-8 Ubuntu eoan *
Openjdk-8 Ubuntu xenial *
Openjdk-9 Ubuntu esm-apps/xenial *
Openjdk-9 Ubuntu xenial *
Openjdk-lts Ubuntu bionic *
Openjdk-lts Ubuntu devel *
Openjdk-lts Ubuntu disco *
Openjdk-lts Ubuntu eoan *
Openjdk-lts Ubuntu focal *
Openjdk-lts Ubuntu groovy *
Openjdk-lts Ubuntu hirsute *
Openjdk-lts Ubuntu impish *
Openjdk-lts Ubuntu jammy *
Openjdk-lts Ubuntu kinetic *
Openjdk-lts Ubuntu lunar *
Openjdk-lts Ubuntu mantic *
Openjdk-lts Ubuntu noble *
Openjdk-lts Ubuntu oracular *

References