CVE-2019-2842

CVE	CVE-2019-2842
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2019-07-23 23:15:00 UTC
Updated	2022-10-06 18:47:00 UTC
Description	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE). The supported version that is affected is Java SE: 8u212. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Problem Types: NVD-CWE-noinfo

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	16.04	All	All	All
Application	Hp	Xp7 Command View	All	All	All	All
Application	Mcafee	Epolicy Orchestrator	5.10.0	-	All	All
Application	Mcafee	Epolicy Orchestrator	5.10.0	update_1	All	All
Application	Mcafee	Epolicy Orchestrator	5.10.0	update_2	All	All
Application	Mcafee	Epolicy Orchestrator	5.10.0	update_3	All	All
Application	Mcafee	Epolicy Orchestrator	5.10.0	update_4	All	All
Application	Mcafee	Epolicy Orchestrator	5.9.0	All	All	All
Application	Mcafee	Epolicy Orchestrator	5.9.1	All	All	All
Operating System	Opensuse	Leap	15.0	All	All	All
Operating System	Opensuse	Leap	15.1	All	All	All
Application	Oracle	Jdk	1.8.0	update212	All	All
Application	Oracle	Jdk	1.8.0	update212	All	All
Application	Oracle	Jre	1.8.0	update212	All	All
Application	Oracle	Jre	1.8.0	update_212	All	All
Application	Oracle	Jre	1.8.0	update_212	All	All

Reference	Source	Link	Tags
USN-4080-1: OpenJDK 8 vulnerabilities \| Ubuntu security notices \| Ubuntu	UBUNTU	usn.ubuntu.com
[security-announce] openSUSE-SU-2019:1912-1: important: Security update	SUSE	lists.opensuse.org
Document Display \| HPE Support Center	CONFIRM	support.hpe.com
Oracle Critical Patch Update Advisory - July 2019	MISC	www.oracle.com	Patch, Vendor Advisory
McAfee Security Bulletin - ePolicy Orchestrator update fixes Java vulnerabilities (CVE-2019-2745, CVE-2019-2762, CVE-2019-2766, CVE-2019-2769, CVE-2019-2816, and CVE-2019-2842)	CONFIRM	kc.mcafee.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

375285 EulerOS Security Update for java-1.8.0-openjdk (EulerOS-SA-2021-1310)
375286 EulerOS Security Update for java-1.7.0-openjdk (EulerOS-SA-2021-1309)
375809 Azul Java Multiple Vulnerabilities Security Update July 2019
375978 Amazon Corretto Critical Patch Update (JUL2019)
377275 Alibaba Cloud Linux Security Update for java-1.7.0-openjdk (ALINUX2-SA-2019:0043)
377464 Alibaba Cloud Linux Security Update for java-1.8.0-openjdk (ALINUX2-SA-2019:0042)
378107 Virtuozzo Linux Security Update for java-1.8.0-openjdk-demo (VZLSA-2019:1811)
378142 Virtuozzo Linux Security Update for java-1.8.0-openjdk-debug (VZLSA-2019:1811)
378180 Virtuozzo Linux Security Update for java-1.7.0-openjdk-headless (VZLSA-2019:1839)
378181 Virtuozzo Linux Security Update for java-1.8.0-openjdk-javadoc-zip (VZLSA-2019:1815)
501210 Alpine Linux Security Update for openjdk7
501219 Alpine Linux Security Update for openjdk8
670271 EulerOS Security Update for java-1.8.0-openjdk (EulerOS-SA-2021-1806)
670272 EulerOS Security Update for java-1.7.0-openjdk (EulerOS-SA-2021-1805)
670542 EulerOS Security Update for java-1.8.0-openjdk (EulerOS-SA-2021-2300)