CVE-2011-0311
Summary
| CVE | CVE-2011-0311 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-09-02 23:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:M/Au:S/C:N/I:N/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Java | 1.4.2 | All | All | All |
| Application | Ibm | Java | 1.4.2.13 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.1 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.2 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.3 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.4 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.5 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.6 | All | All | All |
| Application | Ibm | Java | 1.4.2.13.7 | All | All | All |
| Application | Ibm | Java | All | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.11.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.11.1 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.11.2 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.12.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.12.1 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.12.2 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 5.0.12.3 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.1.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.2.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.3.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.4.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.5.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.6.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.7.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.8.0 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | 6.0.8.1 | All | All | All |
| Application | Ibm | Runtimes For Java Technology | All | All | All | All |
| Application | Ibm | Runtimes For Java Technology | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM IZ89602: JVM CRASHES WHILE LOADING INVALID CLASS FILE - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| PM42551: JVM HANGS OR THROWS NATIVE OUT OF MEMORY WHILE LOADING INVALID C LASS FILE | af854a3a-2127-422b-91ae-364da2661108 | www-304.ibm.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| IBM IZ89620: JVM CRASHES WHILE LOADING INVALID CLASS FILE - United States | af854a3a-2127-422b-91ae-364da2661108 | www-01.ibm.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| [security-announce] SUSE-SU-2011:0823-1: important: Security update for | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| [security-announce] SUSE Security Announcement: IBM Java 1.4.2 (SUSE-SA: | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.