CVE-2018-1517
published 2018-08-20CVE-2018-1517: A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with…
PriorityP339high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
3.98%
89.3th percentile
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| ibm | software_development_kit | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | enterprise_linux_workstation | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
| redhat | satellite | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: DoS in the java.math component
vendor_redhat·2018-08-16·CVSS 5.9
CVE-2018-1517 [MEDIUM] JDK: DoS in the java.math component
JDK: DoS in the java.math component
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
GHSA
GHSA-m9w3-gv68-h6xv: A flaw in the java
ghsa_unreviewed·2022-05-13
CVE-2018-1517 [HIGH] CWE-20 GHSA-m9w3-gv68-h6xv: A flaw in the java
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
No detection rules found.
No public exploits indexed.
http://www.ibm.com/support/docview.wss?uid=ibm10719653http://www.securityfocus.com/bid/105117https://access.redhat.com/errata/RHSA-2018:2568https://access.redhat.com/errata/RHSA-2018:2569https://access.redhat.com/errata/RHSA-2018:2575https://access.redhat.com/errata/RHSA-2018:2576https://access.redhat.com/errata/RHSA-2018:2712https://access.redhat.com/errata/RHSA-2018:2713https://exchange.xforce.ibmcloud.com/vulnerabilities/141681http://www.ibm.com/support/docview.wss?uid=ibm10719653http://www.securityfocus.com/bid/105117https://access.redhat.com/errata/RHSA-2018:2568https://access.redhat.com/errata/RHSA-2018:2569https://access.redhat.com/errata/RHSA-2018:2575https://access.redhat.com/errata/RHSA-2018:2576https://access.redhat.com/errata/RHSA-2018:2712https://access.redhat.com/errata/RHSA-2018:2713https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
2018-08-20
Published