Description
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Published: 2020-04-15
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-2193-1 openjdk-7 security update
Debian DSA Debian DSA DSA-4662-1 openjdk-11 security update
EUVD EUVD EUVD-2020-22623 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Ubuntu USN Ubuntu USN USN-4337-1 OpenJDK vulnerabilities
History

Fri, 27 Sep 2024 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Canonical Ubuntu Linux
Debian Debian Linux
Fedoraproject Fedora
Mcafee Threat Intelligence Exchange Server
Netapp 7-mode Transition Tool Active Iq Unified Manager Cloud Backup E-series Performance Analyzer E-series Santricity Os Controller E-series Santricity Web Services Oncommand Insight Oncommand Workflow Automation Plug-in For Symantec Netbackup Santricity Unified Manager Snapmanager Steelstore Cloud Integrated Storage Storagegrid
Opensuse Leap
Oracle Jdk Jre Openjdk
Redhat Enterprise Linux Rhel E4s Rhel Extras
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-09-27T19:06:46.444Z

Reserved: 2019-12-10T00:00:00.000Z

Link: CVE-2020-2830

cve-icon Vulnrichment

Updated: 2024-08-04T07:17:02.823Z

cve-icon NVD

Status : Modified

Published: 2020-04-15T14:15:29.950

Modified: 2024-11-21T05:26:23.537

Link: CVE-2020-2830

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-04-14T00:00:00Z

Links: CVE-2020-2830 - Bugzilla

cve-icon OpenCVE Enrichment

No data.