CVEvulnerability
CVE-2019-2602
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected configurations
• oracle jdk 1.7.0
• oracle jdk 1.8.0
• oracle jdk 11.0.2
• oracle jdk 12
• oracle jre 1.7.0
• oracle jre 1.8.0
• oracle jre 11.0.2
• oracle jre 12
• redhat openshift container platform 3.11
• redhat satellite 5.8
• redhat enterprise linux 8.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux eus 8.1
• redhat enterprise linux eus 8.2
• redhat enterprise linux eus 8.4
• redhat enterprise linux eus 8.6
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server aus 8.2
• redhat enterprise linux server aus 8.4
• redhat enterprise linux server aus 8.6
• redhat enterprise linux server tus 8.2
• redhat enterprise linux server tus 8.4
• redhat enterprise linux server tus 8.6
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
• opensuse leap 15.0
• opensuse leap 42.3
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 18.10
• canonical ubuntu linux 19.10
• debian debian linux 8.0
• debian debian linux 9.0
• mcafee epolicy orchestrator 5.9.0
• mcafee epolicy orchestrator 5.9.1
• mcafee epolicy orchestrator 5.10.0
• hp xp7 command view (< 8.6.5-00)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Vendor Advisory
- https://access.redhat.com/errata/RHBA-2019:0959 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1146 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1163 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1165 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1166 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1238 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1325 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1518 Third Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10285 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/May/75 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201908-10 Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us Third Party Advisory
- https://usn.ubuntu.com/3975-1/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4453 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Vendor Advisory
- https://access.redhat.com/errata/RHBA-2019:0959 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1146 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1163 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1164 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1165 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1166 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1238 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1325 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:1518 Third Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10285 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/May/75 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201908-10 Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us Third Party Advisory
- https://usn.ubuntu.com/3975-1/ Third Party Advisory
- https://www.debian.org/security/2019/dsa-4453 Third Party Advisory