CVE-2007-3698: sun jdk

Modified

Published 11-07-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-3698 is a high (CVSS 7.8) vulnerability in sun jdk. EPSS estimates a 3.82% chance of exploitation in the next 30 days, higher than 90% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.8, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v2.0 (NVD)

EPSS score

3.82%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5

RHSA-2007:0818 RHSA-2007:0956 RHSA-2007:1086 RHSA-2008:0100 RHSA-2008:0132

Timeline

11-07-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

CVSS metrics

1 score · 1 source · 1 version

v2.07.8

EPSS trend

Probability

3.82%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.82% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Sun3 products

jdk1.5.0:update10 | 1.5.0:update11 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0:update1
jre1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0:update_1
sdk1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14

1 vendor · 3 products

References

40 links

www.redhat.com/support/errata/RHSA-2008-0132.htmlVendor AdvisoryX Refsource REDHATPatch
www.redhat.com/support/errata/RHSA-2007-0818.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/2660VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/26933Third Party AdvisoryX Refsource SECUNIAVendor Advisory
docs.info.apple.com/article.html?artnum=307177X Refsource MISC
www.securityfocus.com/bid/24846VDB EntryX Refsource BIDPatch
secunia.com/advisories/26314Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10634VDB EntrySignatureX Refsource OVAL
support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.htmlX Refsource CONFIRM
www.cisco.com/en/US/products/products_security_response09186a008088bd19.htmlVendor AdvisoryX Refsource CISCO

Show all 40 references

exchange.xforce.ibmcloud.com/vulnerabilities/35333VDB EntryX Refsource XF
secunia.com/advisories/29897Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26015Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28056Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.redhat.com/support/errata/RHSA-2008-0100.htmlVendor AdvisoryX Refsource REDHATPatch
secunia.com/advisories/26221Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.htmlVendor AdvisoryX Refsource SUSE
www.redhat.com/support/errata/RHSA-2007-0956.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/26645Third Party AdvisoryX Refsource SECUNIAVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01269450Vendor AdvisoryX Refsource HP
secunia.com/advisories/28777Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1018357VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2007/4224VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2007/3861VDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2007/3009VDB EntryX Refsource VUPENVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-102997-1Vendor AdvisoryX Refsource SUNALERTPatch
secunia.com/advisories/28880Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27716Third Party AdvisoryX Refsource SECUNIAVendor Advisory
osvdb.org/36663VDB EntryX Refsource OSVDB
www.gentoo.org/security/en/glsa/glsa-200709-15.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/28115Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29340Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/2495VDB EntryX Refsource VUPENVendor Advisory
www.redhat.com/support/errata/RHSA-2007-1086.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/27203Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26631Third Party AdvisoryX Refsource SECUNIAVendor Advisory
dev2dev.bea.com/pub/advisory/249Vendor AdvisoryX Refsource BEA
secunia.com/advisories/27635Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtmlX Refsource CONFIRMVendor Advisory