Lucene search

OracleCVE-2019-2842

HistoryJul 23, 2019 - 11:15 p.m.

CVE-2019-2842

2019-07-2323:15:45

oracle

web.nvd.nist.gov

349

cve-2019-2842

oracle java se

jce

java se 8u212

vulnerability

unauthenticated

network access

dos

java sandbox

web service

cvss 3.0

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

3.8

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected configurations

Nvd

Node

oraclejdkMatch1.8.0update212

oraclejreMatch1.8.0update212

Node

opensuseleapMatch15.0

opensuseleapMatch15.1

Node

hpxp7_command_viewRange<8.7.0-00advanced

Node

mcafeeepolicy_orchestratorMatch5.9.0

mcafeeepolicy_orchestratorMatch5.9.1

mcafeeepolicy_orchestratorMatch5.10.0-

mcafeeepolicy_orchestratorMatch5.10.0update_1

mcafeeepolicy_orchestratorMatch5.10.0update_2

mcafeeepolicy_orchestratorMatch5.10.0update_3

mcafeeepolicy_orchestratorMatch5.10.0update_4

Node

canonicalubuntu_linuxMatch16.04esm

VendorProductVersionCPE
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update212:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update212:*:*:*:*:*:*
opensuseleap15.0cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
opensuseleap15.1cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
hpxp7_command_view*cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:*
mcafeeepolicy_orchestrator5.9.0cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*
mcafeeepolicy_orchestrator5.9.1cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*
mcafeeepolicy_orchestrator5.10.0cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*
mcafeeepolicy_orchestrator5.10.0cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*
mcafeeepolicy_orchestrator5.10.0cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update212::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update212::::::
opensuse	leap	15.0	cpe:2.3:o:opensuse:leap:15.0:::::::*
opensuse	leap	15.1	cpe:2.3:o:opensuse:leap:15.1:::::::*
hp	xp7_command_view	*	cpe:2.3:a:hp:xp7_command_view:::::advanced:::*
mcafee	epolicy_orchestrator	5.9.0	cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:::::::*
mcafee	epolicy_orchestrator	5.9.1	cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:::::::*
mcafee	epolicy_orchestrator	5.10.0	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-::::::
mcafee	epolicy_orchestrator	5.10.0	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1::::::
mcafee	epolicy_orchestrator	5.10.0	cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2::::::

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "Java",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Java SE: 8u212"
      }
    ]
  }
]