CVE-2011-0872 — JDK vulnerability

6 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
13.1%
top 5.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN JDKSUN JRE
Timeline
PublishedJun 14
Latest updateMay 17

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect availability via unknown vectors related to NIO.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDsun/jdk1.6.0+1
▶NVDsun/jre1.6.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-fxp4-jxc9-q23q: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect↗2022-05-17
▶
CVEList
CVE-2011-0872: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier allows remote attackers to affect↗2011-06-14
▶

📋Vendor Advisories

2
Ubuntu
OpenJDK 6 vulnerabilities↗2011-06-17
▶
Red Hat
OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)↗2011-06-07
▶

💬Community

1
Bugzilla
CVE-2011-0872 OpenJDK: non-blocking sockets incorrectly selected for reading (NIO, 6213702)↗2011-05-19
▶
CVE-2011-0872 — SUN JDK vulnerability | cvebase