Lucene search

[email protected]NVD:CVE-2018-2798

HistoryApr 19, 2018 - 2:29 a.m.

CVE-2018-2798

2018-04-1902:29:03

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

Confidence

High

EPSS

0.004

Percentile

73.1%

JSON

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update181

oraclejdkMatch1.7.0update171

oraclejdkMatch1.8.0update162

oraclejdkMatch10

oraclejreMatch1.6.0update181

oraclejreMatch1.7.0update171

oraclejreMatch1.8.0update162

oraclejreMatch10

Node

oraclejrockitMatchr28.3.17

Node

redhatsatelliteMatch5.6

redhatsatelliteMatch5.7

redhatsatelliteMatch5.8

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_server_ausMatch7.6

redhatenterprise_linux_server_eusMatch7.5

redhatenterprise_linux_server_eusMatch7.6

redhatenterprise_linux_server_tusMatch7.6

redhatenterprise_linux_workstationMatch6.0

redhatenterprise_linux_workstationMatch7.0

Node

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch16.04lts

canonicalubuntu_linuxMatch17.10

Node

hpxp7_command_viewadvanced

Node

schneider-electricstruxureware_data_center_expertRange<7.6.0

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update181:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update171:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update162:*:*:*:*:*:*
oraclejdk10cpe:2.3:a:oracle:jdk:10:*:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update181:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update171:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update162:*:*:*:*:*:*
oraclejre10cpe:2.3:a:oracle:jre:10:*:*:*:*:*:*:*
oraclejrockitr28.3.17cpe:2.3:a:oracle:jrockit:r28.3.17:*:*:*:*:*:*:*
redhatsatellite5.6cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update181::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update171::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update162::::::
oracle	jdk	10	cpe:2.3:a:oracle:jdk:10:::::::*
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update181::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update171::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update162::::::
oracle	jre	10	cpe:2.3:a:oracle:jre:10:::::::*
oracle	jrockit	r28.3.17	cpe:2.3:a:oracle:jrockit:r28.3.17:::::::*
redhat	satellite	5.6	cpe:2.3:a:redhat:satellite:5.6:::::::*