CVE-2008-5349

Aliases:CGA-259x-mc43-9w23CGA-2f5f-66q4-ccgqCGA-2gf6-rq38-qv9cCGA-35qx-5jj3-c6fhCGA-37jf-x3fw-hxrpCGA-38vj-3mcj-j5hrCGA-44xq-mv3v-xhw5CGA-46wq-8chr-r8r3CGA-4c43-gxqx-8h36CGA-4v33-3r3x-xw65CGA-4w74-8vjg-4c9rCGA-57cv-7m24-h58fCGA-5c85-rgvx-fghxCGA-5j38-vwjf-q23wCGA-5x3m-7wg8-3x62CGA-6695-pg8v-ww94CGA-67rf-xh33-j76xCGA-68rc-47ch-8374CGA-69pq-jj8f-fhwpCGA-6cx4-7f6g-wq5jCGA-6fmg-6m46-628rCGA-6g7c-3hgx-x3vwCGA-6mh2-hrw3-pp9pCGA-724c-4c2r-g6xrCGA-78pg-hh2q-37jhCGA-78r5-w8rc-vhpgCGA-79xv-xphp-4w3xCGA-7pg3-pwx8-w5phCGA-7xfx-6qgv-x9fqCGA-85fm-r332-7xchCGA-8w3v-9qfr-mqqxCGA-9335-h228-5ggfCGA-995j-m53q-jg73CGA-9q34-296j-8xf7CGA-9q66-4v3q-7f28CGA-9q94-9q24-q8mrCGA-c5pf-73p3-6j6hCGA-cr4r-7q3h-8358CGA-f5g3-2mv7-2c28CGA-f86w-9x2c-mc9gCGA-fcq7-wwgm-cw2jCGA-fqrp-fj7v-x9rjCGA-fw7j-chg5-wjr3CGA-g4v5-c892-mpqpCGA-g57f-5rhg-24cxCGA-g86x-6x57-7j4wCGA-gfcr-5f24-4rh3CGA-h6px-fjpq-ggcvCGA-h886-5hg8-gfqfCGA-h945-g268-xrq4CGA-hfmx-f2qv-vcw5CGA-hvm7-wc8g-g978CGA-j5rw-382v-vfpwCGA-jjf5-cvmw-v2gvCGA-jx69-xp2h-h7h2CGA-jx6r-c62h-hq3xCGA-mh54-752g-p63cCGA-mm2c-fqg5-42mpCGA-mwf6-9m5c-23xfCGA-p3mv-fq2x-8pxwCGA-p53j-fhpg-vv8hCGA-p68w-c29c-rgcjCGA-phqh-6wfg-c2r8CGA-pjr7-h95p-rcv4CGA-pxgj-5q7q-h5rfCGA-qc9x-22q6-9gcjCGA-r8x8-46p9-vm3fCGA-rc3h-9m3p-mgv9CGA-rv34-4gxp-43xpCGA-rvvr-73rr-gx9mCGA-rwcq-gfjj-j248CGA-v43g-g8r7-m4mrCGA-v8fh-m363-m763CGA-vv4x-q8qg-v52rCGA-wgm7-fv93-mq6qCGA-x332-m4f7-cqf7CGA-x3rw-9h64-c5wqCGA-xxvj-6mcg-vhm5
Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 05 Dec 2008, 11:00
Last modified:07 Aug 2024, 10:49

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.1 HIGH
v2.0 (nvd)
EPSS Score
3.99% LOW
4% probability -3.79%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Dec 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 10:49
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.

CVSS Metrics

  • v2.0•HIGH•Score: 7.1AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 3.99%• Percentile: 90%

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8

  • sun•jre

    ≤ 5.0 | ≤ 6 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8

References (30)