CVE-2018-1517

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
ibmCNA
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/A:H/AC:H/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
ibmsoftware_development_kit
6.0
ibmsoftware_development_kit
7.0
ibmsoftware_development_kit
8.0
redhatsatellite
5.6
redhatsatellite
5.7
redhatsatellite
5.8
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ibm-java80
cosmic
dne
bionic
Fixed 8.0.5.22-0ubuntu1
released
xenial
Fixed 8.0.5.22-0ubuntu1
released
trusty
dne