Lucene search
MitreCVE-2009-3876HistoryNov 05, 2009 - 4:30 p.m.
CVE-2009-3876
2009-11-0516:30:00
CWE-399
mitre
web.nvd.nist.gov
76
cve-2009-3876
sun java se
jdk
jre
denial of service
memory consumption
remote attackers
vulnerability
nvd
bug id 6864911
asn.1 der input stream parser
crafted der encoded data
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
Low
EPSS
0.125
Percentile
95.5%
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Affected configurations
Node
sunjdkMatch1.5.0update1
ORsunjdkMatch1.5.0update10
ORsunjdkMatch1.5.0update11
ORsunjdkMatch1.5.0update11_b03
ORsunjdkMatch1.5.0update12
ORsunjdkMatch1.5.0update13
ORsunjdkMatch1.5.0update14
ORsunjdkMatch1.5.0update15
ORsunjdkMatch1.5.0update16
ORsunjdkMatch1.5.0update17
ORsunjdkMatch1.5.0update18
ORsunjdkMatch1.5.0update19
ORsunjdkMatch1.5.0update2
ORsunjdkMatch1.5.0update20
ORsunjdkMatch1.5.0update21
ORsunjdkMatch1.5.0update3
ORsunjdkMatch1.5.0update4
ORsunjdkMatch1.5.0update5
ORsunjdkMatch1.5.0update6
ORsunjdkMatch1.5.0update7
ORsunjdkMatch1.5.0update7_b03
ORsunjdkMatch1.5.0update8
ORsunjdkMatch1.5.0update9
ORsunjdkMatch1.6.0update1
ORsunjdkMatch1.6.0update10
ORsunjdkMatch1.6.0update11
ORsunjdkMatch1.6.0update12
ORsunjdkMatch1.6.0update13
ORsunjdkMatch1.6.0update14
ORsunjdkMatch1.6.0update15
ORsunjdkMatch1.6.0update16
ORsunjdkMatch1.6.0update2
ORsunjdkMatch1.6.0update3
ORsunjdkMatch1.6.0update4
ORsunjdkMatch1.6.0update5
ORsunjdkMatch1.6.0update6
ORsunjdkMatch1.6.0update7
ORsunjdkMatch1.6.0update8
ORsunjdkMatch1.6.0update9
ORsunjreMatch1.4.2_1
ORsunjreMatch1.4.2_2
ORsunjreMatch1.4.2_02
ORsunjreMatch1.4.2_03
ORsunjreMatch1.4.2_3
ORsunjreMatch1.4.2_4
ORsunjreMatch1.4.2_04
ORsunjreMatch1.4.2_05
ORsunjreMatch1.4.2_5
ORsunjreMatch1.4.2_06
ORsunjreMatch1.4.2_6
ORsunjreMatch1.4.2_7
ORsunjreMatch1.4.2_07
ORsunjreMatch1.4.2_8
ORsunjreMatch1.4.2_08
ORsunjreMatch1.4.2_09
ORsunjreMatch1.4.2_9
ORsunjreMatch1.4.2_10
ORsunjreMatch1.4.2_11
ORsunjreMatch1.4.2_12
ORsunjreMatch1.4.2_13
ORsunjreMatch1.4.2_14
ORsunjreMatch1.4.2_15
ORsunjreMatch1.4.2_16
ORsunjreMatch1.4.2_17
ORsunjreMatch1.4.2_18
ORsunjreMatch1.4.2_19
ORsunjreMatch1.4.2_20
ORsunjreMatch1.4.2_21
ORsunjreMatch1.4.2_22
ORsunjreMatch1.4.2_23
ORsunjreMatch1.5.0update1
ORsunjreMatch1.5.0update10
ORsunjreMatch1.5.0update11
ORsunjreMatch1.5.0update12
ORsunjreMatch1.5.0update13
ORsunjreMatch1.5.0update14
ORsunjreMatch1.5.0update15
ORsunjreMatch1.5.0update16
ORsunjreMatch1.5.0update17
ORsunjreMatch1.5.0update18
ORsunjreMatch1.5.0update19
ORsunjreMatch1.5.0update2
ORsunjreMatch1.5.0update20
ORsunjreMatch1.5.0update21
ORsunjreMatch1.5.0update3
ORsunjreMatch1.5.0update4
ORsunjreMatch1.5.0update5
ORsunjreMatch1.5.0update6
ORsunjreMatch1.5.0update7
ORsunjreMatch1.5.0update8
ORsunjreMatch1.5.0update9
ORsunjreMatch1.6.0update_1
ORsunjreMatch1.6.0update_2
ORsunjreMatch1.6.0update_3
ORsunjreMatch1.6.0update10
ORsunjreMatch1.6.0update11
ORsunjreMatch1.6.0update12
ORsunjreMatch1.6.0update13
ORsunjreMatch1.6.0update14
ORsunjreMatch1.6.0update15
ORsunjreMatch1.6.0update16
ORsunjreMatch1.6.0update4
ORsunjreMatch1.6.0update5
ORsunjreMatch1.6.0update6
ORsunjreMatch1.6.0update7
ORsunjreMatch1.6.0update8
ORsunjreMatch1.6.0update9
ORsunsdkMatch1.4.2_01
ORsunsdkMatch1.4.2_1
ORsunsdkMatch1.4.2_2
ORsunsdkMatch1.4.2_02
ORsunsdkMatch1.4.2_03
ORsunsdkMatch1.4.2_3
ORsunsdkMatch1.4.2_04
ORsunsdkMatch1.4.2_4
ORsunsdkMatch1.4.2_5
ORsunsdkMatch1.4.2_05
ORsunsdkMatch1.4.2_6
ORsunsdkMatch1.4.2_06
ORsunsdkMatch1.4.2_07
ORsunsdkMatch1.4.2_7
ORsunsdkMatch1.4.2_8
ORsunsdkMatch1.4.2_08
ORsunsdkMatch1.4.2_09
ORsunsdkMatch1.4.2_9
ORsunsdkMatch1.4.2_10
ORsunsdkMatch1.4.2_11
ORsunsdkMatch1.4.2_12
ORsunsdkMatch1.4.2_13
ORsunsdkMatch1.4.2_14
ORsunsdkMatch1.4.2_15
ORsunsdkMatch1.4.2_16
ORsunsdkMatch1.4.2_17
ORsunsdkMatch1.4.2_18
ORsunsdkMatch1.4.2_19
ORsunsdkMatch1.4.2_20
ORsunsdkMatch1.4.2_21
ORsunsdkMatch1.4.2_22
ORsunsdkMatch1.4.2_23
linuxlinux_kernel
ORmicrosoftwindows
ORsunsolaris
Node
sunjreMatch1.3.1_1
ORsunjreMatch1.3.1_01
ORsunjreMatch1.3.1_01a
ORsunjreMatch1.3.1_02
ORsunjreMatch1.3.1_2
ORsunjreMatch1.3.1_03
ORsunjreMatch1.3.1_3
ORsunjreMatch1.3.1_4
ORsunjreMatch1.3.1_04
ORsunjreMatch1.3.1_05
ORsunjreMatch1.3.1_5
ORsunjreMatch1.3.1_06
ORsunjreMatch1.3.1_6
ORsunjreMatch1.3.1_07
ORsunjreMatch1.3.1_7
ORsunjreMatch1.3.1_8
ORsunjreMatch1.3.1_08
ORsunjreMatch1.3.1_9
ORsunjreMatch1.3.1_09
ORsunjreMatch1.3.1_10
ORsunjreMatch1.3.1_11
ORsunjreMatch1.3.1_12
ORsunjreMatch1.3.1_13
ORsunjreMatch1.3.1_14
ORsunjreMatch1.3.1_15
ORsunjreMatch1.3.1_16
ORsunjreMatch1.3.1_17
ORsunjreMatch1.3.1_18
ORsunjreMatch1.3.1_19
ORsunjreMatch1.3.1_20
ORsunjreMatch1.3.1_21
ORsunjreMatch1.3.1_22
ORsunjreMatch1.3.1_23
ORsunjreMatch1.3.1_24
ORsunjreMatch1.3.1_25
ORsunsdkMatch1.3.1_01
ORsunsdkMatch1.3.1_01a
ORsunsdkMatch1.3.1_2
ORsunsdkMatch1.3.1_02
ORsunsdkMatch1.3.1_03
ORsunsdkMatch1.3.1_3
ORsunsdkMatch1.3.1_4
ORsunsdkMatch1.3.1_04
ORsunsdkMatch1.3.1_5
ORsunsdkMatch1.3.1_05
ORsunsdkMatch1.3.1_6
ORsunsdkMatch1.3.1_06
ORsunsdkMatch1.3.1_7
ORsunsdkMatch1.3.1_07
ORsunsdkMatch1.3.1_8
ORsunsdkMatch1.3.1_08
ORsunsdkMatch1.3.1_9
ORsunsdkMatch1.3.1_09
ORsunsdkMatch1.3.1_10
ORsunsdkMatch1.3.1_11
ORsunsdkMatch1.3.1_12
ORsunsdkMatch1.3.1_13
ORsunsdkMatch1.3.1_14
ORsunsdkMatch1.3.1_15
ORsunsdkMatch1.3.1_16
ORsunsdkMatch1.3.1_17
ORsunsdkMatch1.3.1_18
ORsunsdkMatch1.3.1_19
ORsunsdkMatch1.3.1_20
ORsunsdkMatch1.3.1_21
ORsunsdkMatch1.3.1_22
ORsunsdkMatch1.3.1_23
ORsunsdkMatch1.3.1_24
ORsunsdkMatch1.3.1_25
microsoftwindows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update11_b03:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:* |
| sun | jdk | 1.5.0 | cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:* |
References
java.sun.com/javase/6/webnotes/6u17.html
lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
marc.info/?l=bugtraq&m=126566824131534&w=2
marc.info/?l=bugtraq&m=131593453929393&w=2
marc.info/?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/37231
secunia.com/advisories/37239
secunia.com/advisories/37386
secunia.com/advisories/37841
security.gentoo.org/glsa/glsa-200911-02.xml
sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1
www.mandriva.com/security/advisories?name=MDVSA-2010:084
www.oracle.com/technetwork/topics/security/cpujan2010-084891.html
www.redhat.com/support/errata/RHSA-2009-1694.html
www.securityfocus.com/bid/36881
www.vupen.com/english/advisories/2009/3131
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10328
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11934
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6805
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608
Related
cvelist
cvelist
CVE-2009-3876
2009-11-05 16:00:00
CVE-2010-0079
2010-01-13 01:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:40:39
prion
prion
Code injection
2009-11-05 16:30:00
Code injection
2010-01-13 01:30:00
nvd
nvd
CVE-2009-3876
2009-11-05 16:30:00
CVE-2010-0079
2010-01-13 01:30:01
ubuntucve
ubuntucve
CVE-2009-3876
2009-11-05 00:00:00
kaspersky
kaspersky
KLA10344 Multiple vulnerabilities in Sun Java SE
2009-11-05 00:00:00
redhat
redhat
(RHSA-2009:1551) Moderate: java-1.4.2-ibm security update
2009-11-04 00:00:00
(RHSA-2009:1647) Critical: java-1.5.0-ibm security update
2009-12-08 00:00:00
(RHSA-2009:1643) Critical: java-1.4.2-ibm security update
2009-12-07 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1643
2009-12-14 00:00:00
Sun Java JDK/JRE Multiple Vulnerabilities - Nov09 (Windows)
2009-11-13 00:00:00
RedHat Security Advisory RHSA-2009:1647
2009-12-14 00:00:00
securityvulns
securityvulns
HP Network Node Manager i DoS
2011-09-20 00:00:00
Sun Java multiple security vulnerabilities
2009-11-05 00:00:00
nessus
nessus
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2009:1647)
2009-12-09 00:00:00
SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 6741)
2010-10-11 00:00:00
openSUSE Security Update : java-1_5_0-sun (java-1_5_0-sun-1529)
2009-11-11 00:00:00
cve
cve
CVE-2010-0079
2010-01-13 01:30:01
suse
suse
remote code execution in java-1_5_0-ibm
2010-01-12 09:21:12
remote code execution in java-1_6_0-ibm
2010-01-12 17:47:21
remote code execution in java-1_6_0-sun
2009-11-19 17:02:05
fedora
fedora
[SECURITY] Fedora 11 Update: java-1.6.0-openjdk-1.6.0.0-30.b16.fc11
2009-11-14 03:30:20
[SECURITY] Fedora 12 Update: java-1.6.0-openjdk-1.6.0.0-33.b16.fc12
2009-11-14 03:32:17
[SECURITY] Fedora 10 Update: java-1.6.0-openjdk-1.6.0.0-23.b16.fc10
2009-11-14 03:33:25
oraclelinux
oraclelinux
java-1.6.0-openjdk security update
2009-11-16 00:00:00
centos
centos
java security update
2009-11-18 10:19:02
ubuntu
ubuntu
OpenJDK vulnerabilities
2009-11-12 00:00:00
oracle
oracle
Security | Oracle Critical Patch Update - January 2010
2010-01-12 00:00:00
vmware
vmware
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
VMware vCenter update release addresses multiple security issues in Java JRE
2010-01-29 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.2
Confidence
Low
EPSS
0.125
Percentile
95.5%
Related for CVE-2009-3876