CVE-2017-10053

MEDIUM

Oracle JDK 6u151, 7u141, 8u131; Java SE Embedded 8u131; JRockit R28.3.14 - DoS in 2D Component

Title source: llm
STIX 2.1

Description

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

References (17)

Core 17
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99842
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1791
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1790
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20170720-0001/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1789
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en-us/advisories/vde-2017-002
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2424
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038931
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1792
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201709-22
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2017/dsa-3919
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2481
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2530
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:3453
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2469
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2017/dsa-3954

Scores

CVSS v3 5.3
EPSS 0.0073
EPSS Percentile 72.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

Status published
Products (48)
debian/debian_linux 9.0
debian/debian_linux 10.0
netapp/active_iq_unified_manager 7.3
netapp/active_iq_unified_manager 9.5
netapp/cloud_backup
netapp/e-series_santricity_os_controller 11.0 - 11.70.1
netapp/e-series_santricity_storage_manager
netapp/element_software
netapp/oncommand_balance
netapp/oncommand_insight
... and 38 more
Published Aug 08, 2017
Tracked Since Feb 18, 2026