CVE-2008-5348

Aliases:CGA-25qf-7c29-m9wxCGA-2mqv-2gr9-9fqcCGA-32xc-m3v8-f9p3CGA-39vr-5hw9-fwprCGA-3c43-jp86-wvccCGA-3h74-p6vw-7m4mCGA-3vjr-4683-pv3vCGA-4922-9xmf-w2hjCGA-49m5-4rvw-5mg4CGA-49xq-f387-ccfjCGA-4jr4-frc4-f9m2CGA-5h47-r3qf-p65gCGA-5h96-cw6h-v7xvCGA-5m93-xr3g-789qCGA-5ppx-3c93-6hpwCGA-63fv-pmc3-pg84CGA-64mr-hh77-jv45CGA-69xv-f8fx-rjrqCGA-6fx4-v4m2-9365CGA-6phv-x4cf-q4vxCGA-6r26-839m-2gp5CGA-6v8c-vv89-7g48CGA-7g45-47f5-x2v3CGA-7gr4-g7jm-939pCGA-7hgj-8552-3xfrCGA-7jcc-w9fm-jw79CGA-7q7r-rhq6-px8pCGA-84h7-v6hc-ch83CGA-8cmw-xf5x-8vf4CGA-8hhg-rc43-2c38CGA-8mjc-x368-qr7qCGA-9j98-5fq6-6875CGA-cjh5-w9j5-4253CGA-cvc5-xchg-x636CGA-f3jp-764r-5m3vCGA-fpf4-x258-8jp5CGA-fwgp-mqhx-33mjCGA-g6h7-h7xp-8333CGA-g8hv-q9m2-j5x3CGA-gpc6-8qf5-2c2xCGA-gr6v-4vch-8v54CGA-gwr3-3gpf-8rwpCGA-hcq9-j4xp-fvg6CGA-hmpg-rmcr-7qg6CGA-hxv5-rmcv-2x86CGA-j872-r477-4pvmCGA-jp2m-g2w9-qgj2CGA-m24f-94j2-7jq6CGA-mf2c-c677-7wpxCGA-p89f-xphw-gcrpCGA-pc87-cv5m-pjq5CGA-pm8v-3774-fx92CGA-pwfp-m436-464wCGA-q567-53hp-ppvjCGA-qhw5-7ggr-v7qfCGA-qhx5-w26f-3p6qCGA-r4xj-27h5-wmmhCGA-r52q-p2rg-9gccCGA-rff3-3rwx-wm4gCGA-rvgq-68qr-x884CGA-v2x4-9hf8-4ffwCGA-v3j9-gx3f-6v6rCGA-v3m9-r3fg-h3pgCGA-v559-v38m-r6j7CGA-v58j-697p-q9hvCGA-v5j9-3cf8-f4ffCGA-vchw-vqx7-fm3pCGA-vfp3-4qjr-3wj4CGA-vggw-h3mm-4xq4CGA-vjj7-7252-23w9CGA-vpwq-2hqm-vr3qCGA-vx5m-c2px-rc36CGA-w3jp-cj2v-w2v4CGA-w64h-wrv4-6hj9CGA-wf58-jv5h-jr3hCGA-wpq8-m9gr-6fhxCGA-x6rj-rc6w-x4p9CGA-xxw8-97wg-7qjj
Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 05 Dec 2008, 11:00
Last modified:07 Aug 2024, 10:49

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.1 HIGH
v2.0 (nvd)
EPSS Score
4.31% LOW
4% probability -7.87%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Dec 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 10:49
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors.

CVSS Metrics

  • v2.0•HIGH•Score: 7.1AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 4.31%• Percentile: 91%

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•jre

    ≤ 1.4.2_18 | ≤ 5.0 | ≤ 6 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•sdk

    ≤ 1.4.2_18 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17

References (36)