Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
References
Link Providers
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html cve-icon cve-icon
http://www.securityfocus.com/bid/103847 cve-icon cve-icon
http://www.securitytracker.com/id/1040697 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1188 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1191 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1201 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1202 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1203 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1204 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1205 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1206 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1270 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1278 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1721 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1722 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1723 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1724 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1974 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:1975 cve-icon cve-icon
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2018-2795 cve-icon
https://security.gentoo.org/glsa/201903-14 cve-icon cve-icon
https://security.netapp.com/advisory/ntap-20180419-0001/ cve-icon cve-icon
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us cve-icon cve-icon
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us cve-icon cve-icon
https://usn.ubuntu.com/3644-1/ cve-icon cve-icon
https://usn.ubuntu.com/3691-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2018-2795 cve-icon
https://www.debian.org/security/2018/dsa-4185 cve-icon cve-icon
https://www.debian.org/security/2018/dsa-4225 cve-icon cve-icon
History

Thu, 03 Oct 2024 21:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published: 2018-04-19T02:00:00

Updated: 2024-10-03T20:18:11.453Z

Reserved: 2017-12-15T00:00:00

Link: CVE-2018-2795

cve-icon Vulnrichment

Updated: 2024-08-05T04:29:44.907Z

cve-icon NVD

Status : Modified

Published: 2018-04-19T02:29:03.647

Modified: 2024-11-21T04:04:28.357

Link: CVE-2018-2795

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-04-17T00:00:00Z

Links: CVE-2018-2795 - Bugzilla