CVE-2019-2964

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-2964
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html Mailing List Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html Patch Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:3134 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3135 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3136 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3157 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3158 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4109 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4110 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4113 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:4115 Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0006 Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0046 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/27 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/31 Mailing List Third Party Advisory
https://security.netapp.com/advisory/ntap-20191017-0001/ Third Party Advisory
https://usn.ubuntu.com/4223-1/ Third Party Advisory
https://www.debian.org/security/2019/dsa-4546 Third Party Advisory
https://www.debian.org/security/2019/dsa-4548 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:jdk:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:13.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:11.0.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:13.0.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_unified_manager:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:e-series_santricity_web_services_proxy:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*
cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*

Configuration 4 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
History

08 Oct 2022, 02:59

Type Values Removed Values Added
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0046 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/27 - Mailing List, Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4115 - Third Party Advisory
References (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - (BUGTRAQ) https://seclists.org/bugtraq/2019/Oct/31 - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4113 - Third Party Advisory
References (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - (DEBIAN) https://www.debian.org/security/2019/dsa-4548 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - (REDHAT) https://access.redhat.com/errata/RHSA-2020:0006 - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3158 - Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4223-1/ - (UBUNTU) https://usn.ubuntu.com/4223-1/ - Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4109 - Third Party Advisory
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - (SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:4110 - Third Party Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - (MLIST) https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html - Mailing List, Third Party Advisory
References (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - (REDHAT) https://access.redhat.com/errata/RHSA-2019:3157 - Third Party Advisory
First Time Redhat satellite
Canonical ubuntu Linux
Redhat enterprise Linux Eus
Canonical
Redhat enterprise Linux Server Aus
Opensuse leap
Redhat enterprise Linux Server Tus
Redhat enterprise Linux
Opensuse
CPE cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

13 May 2022, 14:57

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:jre:1.7.0:update_231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update_221:*:*:*:*:*:*		 cpe:2.3:a:oracle:jre:1.7.0:update231:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update221:*:*:*:*:*:*
Information

Published : 2019-10-16 18:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-2964

Mitre link : CVE-2019-2964

CVE.ORG link : CVE-2019-2964

JSON object : View

Products Affected

redhat

  • satellite
  • enterprise_linux_desktop
  • enterprise_linux_server
  • enterprise_linux_eus
  • enterprise_linux
  • enterprise_linux_server_tus
  • enterprise_linux_server_aus
  • enterprise_linux_workstation

opensuse

  • leap

canonical

  • ubuntu_linux

debian

  • debian_linux

netapp

  • e-series_santricity_os_controller
  • e-series_santricity_storage_manager
  • snapmanager
  • e-series_santricity_unified_manager
  • oncommand_workflow_automation
  • e-series_santricity_web_services_proxy

oracle

  • jdk
  • jre
CWE
NVD-CWE-noinfo