RHEL 5 : tomcat6 (RHSA-2011:0348)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0348 advisory. - JDK Double.parseDouble Denial-Of-Service CVE-2010-4476 - tomcat: remote DoS via NIO connector CVE-2011-0534 Note that Nessus has not teste...

OSV-2022-1126 Security exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52922 Crash type: Security exception Crash state: java.base/jdk.internal.math.FloatingDecimal.readJavaFormatString java.base/jdk.internal.math.FloatingDecimal.parseDouble java.base/java.lang.Double.parseDouble...

Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

PT-2022-7722

Name of the Vulnerable Software and Affected Versions: Java Runtime Environment JRE in Oracle Java SE and Java for Business versions prior to 6 Update 24 Java Runtime Environment JRE in Oracle Java SE and Java for Business versions prior to 5.0 Update 28 Java Runtime Environment JRE in Oracle Jav...

RHEL 5 : Red Hat Network Satellite server IBM Java Runtime (RHSA-2011:0880)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0880 advisory. - TLS: MITM attacks via session renegotiation CVE-2009-3555 - krb5: null pointer dereference in GSS-API library leads to DoS...

tomcat5 security update

0:5.5.23-0jpp.17 - Resolves: rhbz 674599 JDK Double.parseDouble DoS...

CVE-2010-4476

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

CVE-2010-4476: Undefined Security Weakness

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

PT-2011-1580

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 6 Update 23 and earlier Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 1.4.2 29 and earlier Description The issue allows remote attackers to cause a...