5.3

CVE-2018-2798

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jdk Version 1.6.0 Update update181
Oracle ≫ Jdk Version 1.7.0 Update update171
Oracle ≫ Jdk Version 1.8.0 Update update162
Oracle ≫ Jdk Version 10
Oracle ≫ Jre Version 1.6.0 Update update181
Oracle ≫ Jre Version 1.7.0 Update update171
Oracle ≫ Jre Version 1.8.0 Update update162
Oracle ≫ Jre Version 10
Oracle ≫ Jrockit Version r28.3.17
Redhat ≫ Satellite Version 5.6
Redhat ≫ Satellite Version 5.7
Redhat ≫ Satellite Version 5.8
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 17.10
Hp ≫ Xp7 Command View SwEdition advanced
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.8% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CISA-ADP 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
Patch
Vendor Advisory
http://www.securitytracker.com/id/1040697
Third Party Advisory
Broken Link
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1203
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1205
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1721
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1722
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1723
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1724
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1974
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1975
Third Party Advisory
https://security.netapp.com/advisory/ntap-20180419-0001/
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us
Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us
Third Party Advisory
https://usn.ubuntu.com/3644-1/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1188
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1191
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1201
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1202
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1204
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1206
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1270
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:1278
Third Party Advisory
https://security.gentoo.org/glsa/201903-14
Third Party Advisory
https://usn.ubuntu.com/3691-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4185
Third Party Advisory
https://www.debian.org/security/2018/dsa-4225
Third Party Advisory
http://www.securityfocus.com/bid/103841
Third Party Advisory
Broken Link
VDB Entry