CVE-2010-0095 — JDK vulnerability

7 documents6 sources

Severity

6.8MEDIUMNVD

CNA5.1

EPSS

3.4%

top 12.53%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedApr 1

Latest updateMay 2

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0093.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDsun/jdk1.6.0+3

▶NVDsun/jre1.6.0+29

▶NVDsun/sdk1.4.2_25+25

🔴Vulnerability Details

GHSA

GHSA-2fm9-mpfh-qw5j: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2022-05-02

▶

CVEList

CVE-2010-0095: Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5↗2010-04-01

▶

📋Vendor Advisories

Ubuntu

OpenJDK vulnerabilities↗2010-04-07

▶

Red Hat

OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)↗2010-03-30

▶

Red Hat

OpenJDK System.arraycopy unable to reference elements beyond Integer.MAX_VALUE bytes (6892265)↗2010-03-30

▶

💬Community

Bugzilla

CVE-2010-0095 OpenJDK Subclasses of InetAddress may incorrectly interpret network addresses (6893954)↗2010-03-22

▶