CVE-2018-2815

Description

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.693

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jdk (x64) 8.0.162(x64)	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jdk 8.0.162	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jre (x64) 8.0.162(x64)	Windows
Vulnerabilities CVE-2018-2798,CVE-2018-2799,CVE-2018-2800,CVE-2018-2811,CVE-2018-2815 are affected in Java jre 8.0.162	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 6.0.1810	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 10	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 1.7.0.1710	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) Java SE Development Kit 8 Update 162 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit Java SE Development Kit 8 Update 162 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) Java SE Development Kit 8 Update 161 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit Java SE Development Kit 8 Update 161 (64-bit)	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 6.0.1810	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 10	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 1.7.0.1710	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 8.0.1620	Windows
Multiple vulnerabilities are affected in Java SE Development Kit (x64) 8.0.1610	Windows
Multiple vulnerabilities are fixed in Azul Zulu JDK 7 7.23	Windows
Multiple vulnerabilities are fixed in Azul Zulu JDK 7 (x64) 7.23	Windows
Multiple vulnerabilities are fixed in Azul Zulu JDK 8 (MSI) 8.30	Windows
Multiple vulnerabilities are fixed in Azul Zulu JDK 8 (MSI) (x64) 8.30	Windows
Multiple vulnerabilities are affected in Java SE Development Kit 8.0.1620	Windows
Multiple vulnerabilities are affected in Java Runtime Environment 1.8 8.0.1620	Windows
Multiple vulnerabilities are affected in Java Runtime Environment 1.8 (x64) 8.0.1620	Windows
CVE-2018-2815	NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-342255	Java Runtime Environment 1.8 (x64) (8.0.4310.10) (Manual Upload Required)
PATCH-342254	Java Runtime Environment 1.8 (8.0.4310.10) (Manual Upload Required)
PATCH-333702	Java SE Development Kit 8 Update 391 (32-bit) (8.0.3910.13) (JDK) (Manual Upload Required)
PATCH-333701	Java SE Development Kit 8 Update 391 (64-bit) (8.0.3910.13) (JDK) (Manual Upload Required)
PATCH-333701	Java SE Development Kit 8 Update 391 (64-bit) (8.0.3910.13) (JDK) (Manual Upload Required)
PATCH-333701	Java SE Development Kit 8 Update 391 (64-bit) (8.0.3910.13) (JDK) (Manual Upload Required)
PATCH-344728	Azul Zulu JDK 8 (MSI) (8.84.0.15)
PATCH-344692	Azul Zulu JDK 8 (MSI) (x64) (8.84.0.15)
PATCH-349783	Java SE Development Kit (8.0.4610.11) (Manual Upload Required)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234