CVE-2007-3698

CVSSv4: NA | CVSSv3: NA | CVSSv2: 7.8 | VMScore: 880 | EPSS: 0.24162 | KEV: Not Included

Published: 11/07/2007 Updated: 21/11/2024

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and previous versions, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 up to and including 1.4.2_14, when using JSSE for SSL/TLS support, allows remote malicious users to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun jdk 1.5.0
sun jdk 1.6.0
sun jre 1.4.2 11
sun jre 1.4.2 12
sun jre 1.4.2 13
sun jre 1.4.2 14
sun jre 1.5.0
sun jre 1.6.0
sun sdk 1.4.2 11
sun sdk 1.4.2 12
sun sdk 1.4.2 13
sun sdk 1.4.2 14

NVD-CWE-Other https://nvd.nist.gov https://www.first.org/epss http://dev2dev.bea.com/pub/advisory/249 http://docs.info.apple.com/article.html?artnum=307177 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://osvdb.org/36663 http://secunia.com/advisories/26015 http://secunia.com/advisories/26221 http://secunia.com/advisories/26314 http://secunia.com/advisories/26631 http://secunia.com/advisories/26645 http://secunia.com/advisories/26933 http://secunia.com/advisories/27203 http://secunia.com/advisories/27635 http://secunia.com/advisories/27716 http://secunia.com/advisories/28056 http://secunia.com/advisories/28115 http://secunia.com/advisories/28777 http://secunia.com/advisories/28880 http://secunia.com/advisories/29340 http://secunia.com/advisories/29897 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml http://www.redhat.com/support/errata/RHSA-2007-0818.html http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.securityfocus.com/bid/24846 http://www.securitytracker.com/id?1018357 http://www.vupen.com/english/advisories/2007/2495 http://www.vupen.com/english/advisories/2007/2660 http://www.vupen.com/english/advisories/2007/3009 http://www.vupen.com/english/advisories/2007/3861 http://www.vupen.com/english/advisories/2007/4224 https://exchange.xforce.ibmcloud.com/vulnerabilities/35333 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634 http://dev2dev.bea.com/pub/advisory/249 http://docs.info.apple.com/article.html?artnum=307177 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html http://osvdb.org/36663 http://secunia.com/advisories/26015 http://secunia.com/advisories/26221 http://secunia.com/advisories/26314 http://secunia.com/advisories/26631 http://secunia.com/advisories/26645 http://secunia.com/advisories/26933 http://secunia.com/advisories/27203 http://secunia.com/advisories/27635 http://secunia.com/advisories/27716 http://secunia.com/advisories/28056 http://secunia.com/advisories/28115 http://secunia.com/advisories/28777 http://secunia.com/advisories/28880 http://secunia.com/advisories/29340 http://secunia.com/advisories/29897 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1 http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html http://www.cisco.com/en/US/products/products_security_response09186a008088bd19.html http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml http://www.redhat.com/support/errata/RHSA-2007-0818.html http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2008-0100.html http://www.redhat.com/support/errata/RHSA-2008-0132.html http://www.securityfocus.com/bid/24846 http://www.securitytracker.com/id?1018357 http://www.vupen.com/english/advisories/2007/2495 http://www.vupen.com/english/advisories/2007/2660 http://www.vupen.com/english/advisories/2007/3009 http://www.vupen.com/english/advisories/2007/3861 http://www.vupen.com/english/advisories/2007/4224 https://exchange.xforce.ibmcloud.com/vulnerabilities/35333 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook