CVE-2018-2657
Description
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Risk Information
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2018-2657 are affected in Java jdk (x64) 7.0.161(x64) | Windows |
| Vulnerabilities CVE-2018-2657 are affected in Java jdk 7.0.161 | Windows |
| Vulnerabilities CVE-2018-2657 are affected in Java jre (x64) 7.0.161(x64) | Windows |
| Vulnerabilities CVE-2018-2657 are affected in Java jre 7.0.161 | Windows |
| Multiple vulnerabilities are affected in Java SE Development Kit 6.0.1710 | Windows |
| Multiple vulnerabilities are affected in Java SE Development Kit 1.7.0.1610 | Windows |
| Multiple vulnerabilities are affected in Java SE Development Kit (x64) 6.0.1710 | Windows |
| Multiple vulnerabilities are affected in Java SE Development Kit (x64) 1.7.0.1610 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.0 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.1 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.0 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.1 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0 | Windows |
| Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1 | Windows |
| Multiple Vulnerabilities are affected in IBM MQ 8.0 | Windows |
| Multiple Vulnerabilities are affected in IBM MQ 9.0 | Windows |
| Multiple Vulnerabilities are affected in IBM MQ 9.0.0 | Windows |
| CVE-2018-2657 | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-330243 | Java SE Development Kit 8 Update 371 (32-bit) (8.0.3710.11) (JDK) |
| PATCH-330242 | Java SE Development Kit 8 Update 371 (64-bit) (8.0.3710.11) (JDK) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234