CVE-2018-1517

MEDIUM

5.9

CVSS Score

Published: August 20, 2018 at 09:00 PM UTC

Updated: June 17, 2026 at 01:51 AM UTC

6 products affected across 2 vendorsEnterprise Linux DesktopEnterprise Linux ServerEnterprise Linux Workstation

Using SDK, Java Technology Edition by IBM?

Get instant alerts when new vulnerabilities affect SDK, Java Technology Edition - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.9

Exploit prediction

EPSS 4%

Description

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Software Development Kit · IBM

95%

6 service_refresh_16 6.0 6r1 service_refresh_8 7 service_refresh_10 7.0 7r1 service_refresh_4 8 service_refresh_5 8.0

Enterprise Linux Desktop · Red Hatrubygems

95%

6.0 7.0

Enterprise Linux Server · Red Hatrubygems

95%

6.0 7.0

Enterprise Linux Workstation · Red Hatrubygems

95%

6.0 7.0

Satellite · Red Hatrpm

95%

5.6 5.7 5.8

Java SDK · IBM

60%

6.0 7.0 8.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (9)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www.ibm.com/support/docview.wss?uid=ibm10719653

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/105117