CVE-2007-3698

HIGH 7.8CVE-2007-3698 · Published 11/07/2007 · updated 16/06/2026

In short

CVE-2007-3698 is a HIGH (CVSS 7.8) vulnerability affecting jdk (sun), jre (sun), sdk (sun).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 1.5.0= 1.6.0`	No fix yet
jre sun	`= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.5.0= 1.6.0`	No fix yet
sdk sun	`= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14`	No fix yet

Description

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

References

dev2dev.bea.com/pub/advisory/249
docs.info.apple.com/article.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
osvdb.org/36663
secunia.com/advisories/26015 · Vendor Advisory
secunia.com/advisories/26221 · Vendor Advisory
secunia.com/advisories/26314 · Vendor Advisory
secunia.com/advisories/26631 · Vendor Advisory
secunia.com/advisories/26645 · Vendor Advisory
secunia.com/advisories/26933 · Vendor Advisory
secunia.com/advisories/27203 · Vendor Advisory
secunia.com/advisories/27635

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

sun

= 1.5.0= 1.6.0

No fix yet

jre

sun

= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.5.0= 1.6.0

No fix yet

sdk

sun

= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14

No fix yet

Description

More vulnerabilities in jdk

See all →