CVE-2019-2962

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-2962
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html Mailing List Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3134 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3135 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3136 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3157 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3158 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4109 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4110 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4113 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4115 Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0006 Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0046 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/27 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/31 Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20191017-0001/ Third Party Advisory
https://usn.ubuntu.com/4223-1/ Third Party Advisory
https://www.debian.org/security/2019/dsa-4546 Third Party Advisory
https://www.debian.org/security/2019/dsa-4548 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:13.0.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_unified_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
History

06 Oct 2022, 18:45

Type Values Removed Values Added
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - Mailing List, Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - Third Party Advisory
References (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4223-1/ - (UBUNTU) https://usn.ubuntu.com/4223-1/ - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - Third Party Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - Third Party Advisory
CPE cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
First Time Redhat satellite
Canonical ubuntu Linux
Redhat enterprise Linux Eus
Canonical
Redhat enterprise Linux Server Aus
Opensuse leap
Redhat enterprise Linux Server Tus
Redhat enterprise Linux
Opensuse

13 May 2022, 14:57

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:jre:1.7.0:update_231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update_221:*:*:*:*:*:*		 cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
Information

Published : 2019-10-16 18:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-2962

Mitre link : CVE-2019-2962

CVE.ORG link : CVE-2019-2962

JSON object : View

Products Affected

redhat

  • enterprise_linux_server
  • enterprise_linux_server_aus
  • enterprise_linux_server_tus
  • enterprise_linux_desktop
  • enterprise_linux_workstation
  • enterprise_linux
  • satellite
  • enterprise_linux_eus

netapp

  • oncommand_workflow_automation
  • e-series_santricity_web_services_proxy
  • e-series_santricity_storage_manager
  • e-series_santricity_unified_manager
  • snapmanager
  • e-series_santricity_os_controller

oracle

  • jre
  • jdk

opensuse

  • leap

debian

  • debian_linux

canonical

  • ubuntu_linux
CWE
NVD-CWE-noinfo