7.5

CVE-2019-2602

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.7.0 Updateupdate211
Oracle ≫ Jdk Version1.8.0 Updateupdate201
Oracle ≫ Jdk Version1.8.0 Updateupdate202
Oracle ≫ Jdk Version11.0.2
Oracle ≫ Jdk Version12
Oracle ≫ Jre Version1.7.0 Updateupdate211
Oracle ≫ Jre Version1.8.0 Updateupdate201
Oracle ≫ Jre Version1.8.0 Updateupdate202
Oracle ≫ Jre Version11.0.2
Oracle ≫ Jre Version12
Redhat ≫ Satellite Version5.8
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Eus Version8.1
Redhat ≫ Enterprise Linux Eus Version8.2
Redhat ≫ Enterprise Linux Eus Version8.4
Redhat ≫ Enterprise Linux Eus Version8.6
Opensuse ≫ Leap Version15.0
Opensuse ≫ Leap Version42.3
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.10
Canonical ≫ Ubuntu Linux Version19.10
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Mcafee ≫ Epolicy Orchestrator Version5.9.0
Mcafee ≫ Epolicy Orchestrator Version5.9.1
Mcafee ≫ Epolicy Orchestrator Version5.10.0 Update-
Hp ≫ Xp7 Command View SwEditionadvanced Version < 8.6.5-00
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.501
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://seclists.org/bugtraq/2019/May/75
Third Party Advisory
Mailing List
https://usn.ubuntu.com/3975-1/
Third Party Advisory