java: denial of service [LWN.net]

Package(s):

java-1.6.0-openjdk

CVE #(s):

CVE-2010-4476

Created:

February 11, 2011

Updated:

July 22, 2011

Description:

From the Red Hat advisory:

A denial of service flaw was found in the way certain strings were converted to Double objects. A remote attacker could use this flaw to cause Java-based applications to hang, for instance if they parse Double values in a specially-crafted HTTP request.

Alerts:

Gentoo	201111-02	2011-11-05
SUSE	SUSE-SU-2011:0823-1	2011-07-22
SUSE	SUSE-SR:2011:008	2011-05-03
CentOS	CESA-2011:0336	2011-04-14
CentOS	CESA-2011:0214	2011-04-14
Mandriva	MDVSA-2011:054	2011-03-27
SUSE	SUSE-SA:2011:014	2011-03-22
SUSE	SUSE-SA:2011:024	2011-05-13
Ubuntu	USN-1079-3	2011-03-17
Ubuntu	USN-1079-2	2011-03-15
Red Hat	RHSA-2011:0336-01	2011-03-09
Red Hat	RHSA-2011:0335-01	2011-03-09
Ubuntu	USN-1079-1	2011-03-01
Red Hat	RHSA-2011:0290-01	2011-02-22
Red Hat	RHSA-2011:0291-01	2011-02-22
Red Hat	RHSA-2011:0292-01	2011-02-22
SUSE	SUSE-SA:2011:010	2011-02-22
openSUSE	openSUSE-SU-2011:0126-1	2011-02-22
Red Hat	RHSA-2011:0282-01	2011-02-17
Debian	DSA-2161-2	2011-02-14
Debian	DSA-2161-1	2011-02-13
Fedora	FEDORA-2011-1231	2011-02-10
Fedora	FEDORA-2011-1263	2011-02-10
Red Hat	RHSA-2011:0214-01	2011-02-10

(Log in to post comments)