CVE-2007-3698
- State
- Published
- Severity
- Not scored
- Published
- Jul 11, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jul 11, 2007
Description
The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2008:0132vendor-advisory
- RHSA-2007:0818vendor-advisory
- ADV-2007-2660vdb-entry
- 26933third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307177
- 24846vdb-entry
- 26314third-party-advisory
- oval:org.mitre.oval:def:10634vdb-entrysignature
- http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html
- 20070725 Vulnerability in Java Secure Socket Extensionvendor-advisory
- sun-jsse-ssltls-dos(35333)vdb-entry
- 29897third-party-advisory
- 26015third-party-advisory
- 28056third-party-advisory
- APPLE-SA-2007-12-14vendor-advisory
- RHSA-2008:0100vendor-advisory
- 26221third-party-advisory
- SUSE-SA:2008:025vendor-advisory
- RHSA-2007:0956vendor-advisory
- 26645third-party-advisory
- SSRT071465vendor-advisory
- 28777third-party-advisory
- 1018357vdb-entry
- ADV-2007-4224vdb-entry
- ADV-2007-3861vdb-entry
- ADV-2007-3009vdb-entry
- 102997vendor-advisory
- 28880third-party-advisory
- 27716third-party-advisory
- 36663vdb-entry
- GLSA-200709-15vendor-advisory
- 28115third-party-advisory
- 29340third-party-advisory
- ADV-2007-2495vdb-entry
- RHSA-2007:1086vendor-advisory
- 27203third-party-advisory
- 26631third-party-advisory
- BEA07-178.00vendor-advisory
- 27635third-party-advisory
- http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.