java is vulnerable to denial of service (DoS). The vulnerability exists as the Kerberos implementation improperly checked the sanity of AP-REQ requests, which could cause a denial of service condition in the receiving Java Virtual Machine.
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748
lists.fedoraproject.org/pipermail/package-announce/2010-October/049455.html
lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
secunia.com/advisories/41972
secunia.com/advisories/42377
security.gentoo.org/glsa/glsa-201406-32.xml
support.avaya.com/css/P8/documents/100114327
support.avaya.com/css/P8/documents/100123193
www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2010-0768.html
www.redhat.com/support/errata/RHSA-2010-0865.html
www.securityfocus.com/bid/43963
www.ubuntu.com/usn/USN-1010-1
www.us-cert.gov/cas/techalerts/TA10-287A.html
www.vupen.com/english/advisories/2010/3086
access.redhat.com/errata/RHSA-2010:0865
access.redhat.com/kb/docs/DOC-20491
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12398