CVE-2019-2602

HIGH
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html

http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://access.redhat.com/errata/RHBA-2019:0959

https://access.redhat.com/errata/RHSA-2019:1146

https://access.redhat.com/errata/RHSA-2019:1163

https://access.redhat.com/errata/RHSA-2019:1164

https://access.redhat.com/errata/RHSA-2019:1165

https://access.redhat.com/errata/RHSA-2019:1166

https://access.redhat.com/errata/RHSA-2019:1238

https://access.redhat.com/errata/RHSA-2019:1325

https://access.redhat.com/errata/RHSA-2019:1518

https://kc.mcafee.com/corporate/index?page=content&id=SB10285

https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html

https://seclists.org/bugtraq/2019/May/75

https://security.gentoo.org/glsa/201908-10

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us

https://usn.ubuntu.com/3975-1/

https://www.debian.org/security/2019/dsa-4453

Details

Source: MITRE

Published: 2019-04-23

Updated: 2020-09-08

Type: CWE-400

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Tenable Plugins

View all (71 total)

IDNameProductFamilySeverity
151214OpenJDK 7 <= 7u211 / 8 <= 8u202 / 11.0.0 <= 11.0.2 / 12.0.0 <= 12.0.0 Multiple Vulnerabilities (2019-04-16)NessusMisc.
high
145656CentOS 8 : java-11-openjdk (CESA-2019:1518)NessusCentOS Local Security Checks
medium
144543Virtuozzo 6 : java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc (VZLSA-2019-0774)NessusVirtuozzo Local Security Checks
high
136333Photon OS 2.0: Openjdk11 PHSA-2020-2.0-0235NessusPhotonOS Local Security Checks
medium
136109Photon OS 1.0: Openjdk11 PHSA-2020-1.0-0290NessusPhotonOS Local Security Checks
critical
136100Photon OS 3.0: Openjdk11 PHSA-2020-3.0-0084NessusPhotonOS Local Security Checks
critical
129200EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2019-2007)NessusHuawei Local Security Checks
high
128285Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2019-1269)NessusAmazon Linux Local Security Checks
high
127959GLSA-201908-10 : Oracle JDK/JRE: Multiple vulnerabilitiesNessusGentoo Local Security Checks
critical
127819Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2019-1266)NessusAmazon Linux Local Security Checks
high
127592Oracle Linux 8 : java-11-openjdk (ELSA-2019-1518)NessusOracle Linux Local Security Checks
medium
127581Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2019-1146)NessusOracle Linux Local Security Checks
high
127435NewStart CGSL MAIN 4.05 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0157)NessusNewStart CGSL Local Security Checks
high
127429NewStart CGSL MAIN 4.05 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0154)NessusNewStart CGSL Local Security Checks
high
127314NewStart CGSL MAIN 4.06 : java-1.8.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0093)NessusNewStart CGSL Local Security Checks
high
127309NewStart CGSL MAIN 4.06 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0090)NessusNewStart CGSL Local Security Checks
high
126935EulerOS 2.0 SP5 : java-1.7.0-openjdk (EulerOS-SA-2019-1759)NessusHuawei Local Security Checks
high
126924AIX Java Advisory : java_apr2019_advisory.asc (April 2019 CPU)NessusAIX Local Security Checks
high
126872EulerOS 2.0 SP2 : java-1.7.0-openjdk (EulerOS-SA-2019-1745)NessusHuawei Local Security Checks
high
126440SUSE SLED15 / SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:1211-2) (Spectre)NessusSuSE Local Security Checks
high
126336SUSE SLED15 / SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2019:1308-2)NessusSuSE Local Security Checks
high
126167SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2019:1644-1)NessusSuSE Local Security Checks
high
126027RHEL 8 : java-11-openjdk (RHSA-2019:1518)NessusRed Hat Local Security Checks
medium
125900Amazon Linux 2 : java-11-amazon-corretto (ALAS-2019-1228)NessusAmazon Linux Local Security Checks
high
125756RHEL 6 : java-1.8.0-ibm (RHSA-2019:1325)NessusRed Hat Local Security Checks
high
125698openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2019-1500)NessusSuSE Local Security Checks
high
125676SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2019:1392-1)NessusSuSE Local Security Checks
high
125608Debian DSA-4453-1 : openjdk-8 - security updateNessusDebian Local Security Checks
high
125512EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2019-1585)NessusHuawei Local Security Checks
high
125461SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2019:1345-1)NessusSuSE Local Security Checks
high
125451openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2019-1439) (Spectre)NessusSuSE Local Security Checks
high
125450openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2019-1438) (Spectre)NessusSuSE Local Security Checks
high
125336SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2019:14059-1)NessusSuSE Local Security Checks
high
125335SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2019:1308-1)NessusSuSE Local Security Checks
high
125288Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2019-1209)NessusAmazon Linux Local Security Checks
high
125239RHEL 8 : java-1.8.0-ibm (RHSA-2019:1238)NessusRed Hat Local Security Checks
critical
125028Ubuntu 16.04 LTS / 18.04 LTS / 18.10 / 19.04 : OpenJDK vulnerabilities (USN-3975-1)NessusUbuntu Local Security Checks
high
125023SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:1219-1) (Spectre)NessusSuSE Local Security Checks
high
125015RHEL 7 : java-1.7.1-ibm (RHSA-2019:1166)NessusRed Hat Local Security Checks
high
125014RHEL 6 : java-1.7.1-ibm (RHSA-2019:1165)NessusRed Hat Local Security Checks
high
125013RHEL 7 : java-1.8.0-ibm (RHSA-2019:1164)NessusRed Hat Local Security Checks
high
125012RHEL 6 : java-1.8.0-ibm (RHSA-2019:1163)NessusRed Hat Local Security Checks
high
124857SUSE SLED15 / SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2019:1211-1) (Spectre)NessusSuSE Local Security Checks
high
124847RHEL 8 : java-1.8.0-openjdk (RHSA-2019:1146)NessusRed Hat Local Security Checks
high
124777Debian DLA-1782-1 : openjdk-7 security updateNessusDebian Local Security Checks
high
124642openSUSE Security Update : java-11-openjdk (openSUSE-2019-1327)NessusSuSE Local Security Checks
medium
700660Oracle Java SE 7 < Update 221 / 8 < Update 211 / 11 < Update 3 / 12 < Update 1 Multiple Vulnerabilities (Apr 2019 CPU)Nessus Network MonitorWeb Clients
critical
124397EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2019-1301)NessusHuawei Local Security Checks
high
124362SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2019:1052-1)NessusSuSE Local Security Checks
medium
124242CentOS 7 : java-1.7.0-openjdk (CESA-2019:0791)NessusCentOS Local Security Checks
high
124241CentOS 6 : java-1.7.0-openjdk (CESA-2019:0790)NessusCentOS Local Security Checks
high
124235Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20190422)NessusScientific Linux Local Security Checks
high
124234Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20190422)NessusScientific Linux Local Security Checks
high
124233RHEL 7 : java-1.7.0-openjdk (RHSA-2019:0791)NessusRed Hat Local Security Checks
high
124232RHEL 6 : java-1.7.0-openjdk (RHSA-2019:0790)NessusRed Hat Local Security Checks
high
124230Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2019-0791)NessusOracle Linux Local Security Checks
high
124229Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2019-0790)NessusOracle Linux Local Security Checks
high
124203CentOS 7 : java-11-openjdk (CESA-2019:0778)NessusCentOS Local Security Checks
medium
124202CentOS 7 : java-1.8.0-openjdk (CESA-2019:0775)NessusCentOS Local Security Checks
high
124201CentOS 6 : java-1.8.0-openjdk (CESA-2019:0774)NessusCentOS Local Security Checks
high
124198Oracle Java SE 1.7.0_221 / 1.8.0_211 / 1.11.0_3 / 1.12.0_1 Multiple Vulnerabilities (Apr 2019 CPU)NessusWindows
critical
124197Oracle Java SE 1.7.0_221 / 1.8.0_211 / 1.11.0_3 / 1.12.0_1 Multiple Vulnerabilities (Apr 2019 CPU) (Unix)NessusMisc.
critical
124185Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20190417)NessusScientific Linux Local Security Checks
high
124184Scientific Linux Security Update : java-11-openjdk on SL7.x x86_64 (20190417)NessusScientific Linux Local Security Checks
medium
124139Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20190417)NessusScientific Linux Local Security Checks
high
124138RHEL 7 : java-11-openjdk (RHSA-2019:0778)NessusRed Hat Local Security Checks
medium
124137RHEL 7 : java-1.8.0-openjdk (RHSA-2019:0775)NessusRed Hat Local Security Checks
high
124136RHEL 6 : java-1.8.0-openjdk (RHSA-2019:0774)NessusRed Hat Local Security Checks
high
124135Oracle Linux 7 : java-11-openjdk (ELSA-2019-0778)NessusOracle Linux Local Security Checks
medium
124134Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2019-0775)NessusOracle Linux Local Security Checks
high
124133Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2019-0774)NessusOracle Linux Local Security Checks
high