CVE-2007-3698

CAO 7.8CVE-2007-3698 · Công bố 11/07/2007 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2007-3698 là lỗ hổng mức CAO (CVSS 7.8) ảnh hưởng jdk (sun), jre (sun), sdk (sun).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 3.8%, cao hơn 90.1% các lỗ hổng khác.
Chưa có phiên bản vá trong dữ liệu: theo dõi khuyến cáo của nhà cung cấp ở phần Tham khảo.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
jdk sun	`= 1.5.0= 1.6.0`	Chưa có bản vá
jre sun	`= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.5.0= 1.6.0`	Chưa có bản vá
sdk sun	`= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14`	Chưa có bản vá

Mô tả

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Tham khảo

dev2dev.bea.com/pub/advisory/249
docs.info.apple.com/article.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
osvdb.org/36663
secunia.com/advisories/26015 · Vendor Advisory
secunia.com/advisories/26221 · Vendor Advisory
secunia.com/advisories/26314 · Vendor Advisory
secunia.com/advisories/26631 · Vendor Advisory
secunia.com/advisories/26645 · Vendor Advisory
secunia.com/advisories/26933 · Vendor Advisory
secunia.com/advisories/27203 · Vendor Advisory
secunia.com/advisories/27635 · Vendor Advisory
secunia.com/advisories/27716 · Vendor Advisory
secunia.com/advisories/28056 · Vendor Advisory
secunia.com/advisories/28115 · Vendor Advisory
secunia.com/advisories/28777 · Vendor Advisory
secunia.com/advisories/28880 · Vendor Advisory
secunia.com/advisories/29340 · Vendor Advisory
secunia.com/advisories/29897 · Vendor Advisory
sunsolve.sun.com/search/document.do · Patch
support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html
cisco.com/en/US/products/products_security_response09186a008088bd19.html · Vendor Advisory
cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml · Vendor Advisory
gentoo.org/security/en/glsa/glsa-200709-15.xml
redhat.com/support/errata/RHSA-2007-0818.html
redhat.com/support/errata/RHSA-2007-0956.html
redhat.com/support/errata/RHSA-2007-1086.html
redhat.com/support/errata/RHSA-2008-0100.html · Patch
redhat.com/support/errata/RHSA-2008-0132.html · Patch
securityfocus.com/bid/24846 · Patch
securitytracker.com/id
vupen.com/english/advisories/2007/2495 · Vendor Advisory
vupen.com/english/advisories/2007/2660 · Vendor Advisory
vupen.com/english/advisories/2007/3009 · Vendor Advisory
vupen.com/english/advisories/2007/3861 · Vendor Advisory
vupen.com/english/advisories/2007/4224 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35333
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634

Lỗ hổng khác của jdk

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí