Lucene search

RedosROS-20240521-05

HistoryMay 21, 2024 - 12:00 a.m.

ROS-20240521-05

2024-05-2100:00:00

redos.red-soft.ru

oracle java se

graalvm

hotspot component

jsse component

javafx

swing component

serialization component

input validation

data integrity

resource consumption

remote attacker

denial of service

sensitive information

message integrity

uncontrolled resource consumption

in-memory recovery

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.3%

JSON

A vulnerability in the Hotspot component of the Oracle Java SE software platform and Oracle GraalVM Virtual Machine
Enterprise Edition exists due to insufficient input validation. Exploitation of the vulnerability could
Allow a remote attacker to disclose protected information

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine.
Enterprise Edition is related to insufficient input validation. Exploitation of the vulnerability could
Allow a remote attacker to cause a denial of service

Vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine.
Enterprise Edition is related to a lack of message integrity checking. Exploitation of the vulnerability could
allow an attacker acting remotely to disclose protected information or create, delete, or
modify access to data

Vulnerability in the Hotspot component of the Java SE software platform and Oracle GraalVM Virtual Machines
Enterprise Edition and Oracle GraalVM for JDK is related to errors in input data processing.
Exploitation of the vulnerability could allow an attacker to gain access to sensitive information

Vulnerability of JavaFX component of Oracle Java SE software platforms is related to errors in input data processing.
input data. Exploitation of the vulnerability could allow a remote attacker to cause
impact data integrity

A vulnerability in the JSSE component of the Oracle Java SE software platform and Oracle GraalVM virtual machine.
Enterprise Edition is associated with uncontrolled resource consumption. Exploitation of the vulnerability could allow
an attacker acting remotely to cause a denial of service

A vulnerability in the Swing component of the Oracle Java SE software platform and Oracle GraalVM virtual machine.
Enterprise Edition exists due to insufficient input validation. Exploitation of the vulnerability could
Allow a remote attacker to manipulate data

A vulnerability in the Serialization component of the Oracle Java SE software platform and Oracle Virtual Machine
GraalVM Enterprise Edition is associated with in-memory recovery of invalid data. Exploitation
of the vulnerability could allow an attacker acting remotely to gain access to modify, add
or delete data

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64java-1.8.0-openjdk<= 1.8.0.402.b06-1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	java-1.8.0-openjdk	<= 1.8.0.402.b06-1	UNKNOWN

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.3%

JSON

Related for ROS-20240521-05