CVE-2010-0088 — Time-of-check Time-of-use (TOCTOU) Race Condition in JDK

CWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition8 documents6 sources

Severity

6.8MEDIUMNVD

CNA5.1

EPSS

3.4%

top 12.53%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedApr 1

Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDsun/jdk1.6.0+38

▶NVDsun/jre1.6.0+57

▶NVDsun/sdk1.4.2_25+60

🔴Vulnerability Details

GHSA

GHSA-53c3-c3pf-mjfg: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02

▶

CVEList

CVE-2010-0088: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2010-04-07

▶

Red Hat

OpenJDK Inflater/Deflater clone issues (6745393)↗2010-03-30

▶

Red Hat

OpenJDK File TOCTOU deserialization vulnerability (6736390)↗2010-03-30

▶

💬Community

Bugzilla

CVE-2010-3445 wireshark: stack overflow in BER dissector↗2010-10-01

▶

Bugzilla

CVE-2010-0088 OpenJDK Inflater/Deflater clone issues (6745393)↗2010-03-22

▶