CVE-2017-10349

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 19-10-2017 07:29

Last modified: - 06-10-2022 08:59

Total changes: - 3

Description

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Low

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

5.3

Base score

3.9

1.4

Exploitability score

Impact score

Verification logic

Reference

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
1039596-Broken Link
101348-Broken Link
GLSA-201710-31-Third Party Advisory
DSA-4015-Third Party Advisory
https://security.netapp.com/advisory/ntap-20171019-0001/
GLSA-201711-14-Third Party Advisory
DSA-4048-Third Party Advisory
RHSA-2017:3268-Third Party Advisory
RHSA-2017:3267-Third Party Advisory
RHSA-2017:3264-Third Party Advisory
RHSA-2017:3392-Third Party Advisory
RHSA-2017:2998-Third Party Advisory
RHSA-2017:3047-Third Party Advisory
RHSA-2017:3046-Third Party Advisory
RHSA-2017:3453-Third Party Advisory
RHSA-2017:2999-Third Party Advisory
[debian-lts-announce] 20171123 [SECURITY] [DLA 1187-1] openjdk-7 security update-Mailing List, Third Party Advisory

Keywords

CVE-2017-10349

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2017-10349

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures