Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-4476

Fixed in a distro release EPSS 23%

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

Published 2011-02-17 · CVE record · OSV

Products: sun jre, sun jdk, sun sdk

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.tomcat:tomcat7.0.7
Mavenorg.apache.tomcat:tomcat6.0.32
Mavenorg.apache.tomcat:tomcat5.5.33

Distro releases

ReleasePackageFixed in
Debian 5.0openjdk-66b18-1.8.3-2~lenny1
Debian 6.0openjdk-66b18-1.8.3-2+squeeze1
Red Hat Enterprise Linux 5java-1.6.0-openjdk1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-debuginfo1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-demo1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-devel1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-javadoc1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5java-1.6.0-openjdk-src1:1.6.0.0-1.18.b17.el5
Red Hat Enterprise Linux 5tomcat50:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-admin-webapps0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-common-lib0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-debuginfo0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-jasper0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-jasper-javadoc0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-jsp-2.0-api0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-jsp-2.0-api-javadoc0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-server-lib0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-servlet-2.4-api0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-servlet-2.4-api-javadoc0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 5tomcat5-webapps0:5.5.23-0jpp.17.el5_6
Red Hat Enterprise Linux 6java-1.6.0-openjdk1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6java-1.6.0-openjdk-debuginfo1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6java-1.6.0-openjdk-demo1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6java-1.6.0-openjdk-devel1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6java-1.6.0-openjdk-javadoc1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6java-1.6.0-openjdk-src1:1.6.0.0-1.36.b17.el6_0
Red Hat Enterprise Linux 6tomcat60:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-admin-webapps0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-docs-webapp0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-el-2.1-api0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-javadoc0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-jsp-2.1-api0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-lib0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-log4j0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-servlet-2.5-api0:6.0.24-24.el6_0
Red Hat Enterprise Linux 6tomcat6-webapps0:6.0.24-24.el6_0
Red Hat jboss enterprise application platform 4.2.0jbossweb0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 4.2.0jbossweb0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.3.0jbossweb0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5
Red Hat jboss enterprise application platform 4.3.0jbossweb0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4
Red Hat jboss enterprise application platform 5jbossweb0:2.1.10-5.patch01.1.ep5.el4
Red Hat jboss enterprise application platform 5jbossweb0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise application platform 5jbossweb-jsp-2.1-api0:2.1.10-5.patch01.1.ep5.el4
Red Hat jboss enterprise application platform 5jbossweb-jsp-2.1-api0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise application platform 5jbossweb-lib0:2.1.10-5.patch01.1.ep5.el4
Red Hat jboss enterprise application platform 5jbossweb-lib0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise application platform 5jbossweb-servlet-2.5-api0:2.1.10-5.patch01.1.ep5.el4
Red Hat jboss enterprise application platform 5jbossweb-servlet-2.5-api0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise web platform 5jbossweb0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise web platform 5jbossweb-jsp-2.1-api0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise web platform 5jbossweb-lib0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise web platform 5jbossweb-servlet-2.5-api0:2.1.10-5.patch01.1.1.ep5.el5
Red Hat jboss enterprise web server 1tomcat50:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat50:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-admin-webapps0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-admin-webapps0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-common-lib0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-common-lib0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-jasper0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-jasper0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-jasper-eclipse0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-jasper-eclipse0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-jasper-javadoc0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-jasper-javadoc0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-jsp-2.0-api0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-jsp-2.0-api0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-jsp-2.0-api-javadoc0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-jsp-2.0-api-javadoc0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-parent0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-parent0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-server-lib0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-server-lib0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-servlet-2.4-api0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-servlet-2.4-api0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-servlet-2.4-api-javadoc0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat5-servlet-2.4-api-javadoc0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-webapps0:5.5.28-18_patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat5-webapps0:5.5.28-12_patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat60:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat60:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-admin-webapps0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-admin-webapps0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-docs-webapp0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-docs-webapp0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-el-1.0-api0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-el-1.0-api0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-javadoc0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-javadoc0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-jsp-2.1-api0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-jsp-2.1-api0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-lib0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-lib0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-log4j0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-log4j0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-servlet-2.5-api0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-servlet-2.5-api0:6.0.24-11.patch_03.ep5.el4
Red Hat jboss enterprise web server 1tomcat6-webapps0:6.0.24-11.patch_03.ep5.el5
Red Hat jboss enterprise web server 1tomcat6-webapps0:6.0.24-11.patch_03.ep5.el4
Red Hat network satellite 5.4java-1.6.0-ibm1:1.6.0.9.1-1jpp.1.el5
Red Hat network satellite 5.4java-1.6.0-ibm-devel1:1.6.0.9.1-1jpp.1.el5
Red Hat rhel extras 4java-1.4.2-ibm0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-demo0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-devel0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-javacomm0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-jdbc0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-plugin0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.4.2-ibm-src0:1.4.2.13.8-1jpp.4.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.12.3-1jpp.2.el4
Red Hat rhel extras 4java-1.6.0-ibm1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-demo1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-devel1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-javacomm1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-jdbc1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-plugin1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-ibm-src1:1.6.0.9.0-1jpp.4.el4
Red Hat rhel extras 4java-1.6.0-sun1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-demo1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-devel1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-jdbc1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-plugin1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-src1:1.6.0.24-1jpp.1.el4
Red Hat rhel extras 5java-1.4.2-ibm0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-demo0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-devel0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-javacomm0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-jdbc0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-plugin0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.4.2-ibm-src0:1.4.2.13.8-1jpp.3.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-accessibility1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.12.3-1jpp.2.el5
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.9.0-1jpp.4.el5
Red Hat rhel extras 5java-1.6.0-sun1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-demo1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-devel1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-jdbc1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-plugin1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-src1:1.6.0.24-1jpp.1.el5
Red Hat rhel extras 6java-1.5.0-ibm1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-demo1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-devel1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-javacomm1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-jdbc1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-plugin1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.5.0-ibm-src1:1.5.0.12.3-1jpp.3.el6
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.9.0-1jpp.5.el6
Red Hat rhel extras 6java-1.6.0-sun1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras 6java-1.6.0-sun-demo1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras 6java-1.6.0-sun-devel1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras 6java-1.6.0-sun-jdbc1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras 6java-1.6.0-sun-plugin1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras 6java-1.6.0-sun-src1:1.6.0.24-1jpp.1.el6
Red Hat rhel extras sap 4java-1.4.2-ibm-sap0:1.4.2.13.8.sap-1jpp.2.el4_8
Red Hat rhel extras sap 4java-1.4.2-ibm-sap-demo0:1.4.2.13.8.sap-1jpp.2.el4_8
Red Hat rhel extras sap 4java-1.4.2-ibm-sap-devel0:1.4.2.13.8.sap-1jpp.2.el4_8
Red Hat rhel extras sap 4java-1.4.2-ibm-sap-javacomm0:1.4.2.13.8.sap-1jpp.2.el4_8
Red Hat rhel extras sap 4java-1.4.2-ibm-sap-src0:1.4.2.13.8.sap-1jpp.2.el4_8
Red Hat rhel extras sap 5java-1.4.2-ibm-sap0:1.4.2.13.8.sap-1jpp.2.el5
Red Hat rhel extras sap 5java-1.4.2-ibm-sap-demo0:1.4.2.13.8.sap-1jpp.2.el5
Red Hat rhel extras sap 5java-1.4.2-ibm-sap-devel0:1.4.2.13.8.sap-1jpp.2.el5
Red Hat rhel extras sap 5java-1.4.2-ibm-sap-javacomm0:1.4.2.13.8.sap-1jpp.2.el5
Red Hat rhel extras sap 5java-1.4.2-ibm-sap-src0:1.4.2.13.8.sap-1jpp.2.el5