CVE-2015-1916
published 2015-07-02CVE-2015-1916: Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure…
PriorityP434high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.70%
84.2th percentile
Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | java | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: unspecified SSL/TLS server DoS
vendor_redhat·2015-05-06·CVSS 5.0
CVE-2015-1916 [MEDIUM] JDK: unspecified SSL/TLS server DoS
JDK: unspecified SSL/TLS server DoS
Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.7.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.1-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.1-ibm (Red Hat Enterprise Linux 7) - Not affected
VulDB
IBM Java 8 SSL/TLS denial of service (Nessus ID 84087 / ID 123567)
vuldb·2026-05-28·CVSS 7.5
CVE-2015-1916 [HIGH] IBM Java 8 SSL/TLS denial of service (Nessus ID 84087 / ID 123567)
A vulnerability marked as problematic has been reported in IBM Java 8. This vulnerability affects unknown code of the component SSL/TLS Handler. This manipulation causes denial of service.
This vulnerability is registered as CVE-2015-1916. Remote exploitation of the attack is possible. No exploit is available.
GHSA
GHSA-wfg4-xgj4-pp73: Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the
ghsa_unreviewed·2022-05-17
CVE-2015-1916 [MEDIUM] GHSA-wfg4-xgj4-pp73: Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the
Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.
No detection rules found.
No public exploits indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245http://www-01.ibm.com/support/docview.wss?uid=swg21883640http://www.securitytracker.com/id/1032779http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245http://www-01.ibm.com/support/docview.wss?uid=swg21883640http://www.securitytracker.com/id/1032779
2015-07-02
Published