CVE-2009-1101 — JDK vulnerability

6 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

7.2%

top 8.39%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE

Timeline

PublishedMar 25

Latest updateMay 2

Description

Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDsun/jdk1.6.0+1

▶NVDsun/jre1.6.0+1

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-84rr-q55c-9hm6: Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 1↗2022-05-02

▶

CVEList

CVE-2009-1101: Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 1↗2009-03-25

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2009-03-26

▶

Red Hat

OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639)↗2009-03-25

▶

💬Community

Bugzilla

CVE-2009-1101 OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639)↗2009-03-13

▶