Patchwire CVEs, their patch status, and feeds to follow them

CVE-2011-5035

Fixed in a distro release EPSS 68%

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.

Published 2011-12-30 · CVE record · OSV

Products: oracle glassfish_server

Distro releases

ReleasePackageFixed in
Debian 6.0openjdk-66b18-1.8.13-0+squeeze1
Red Hat Enterprise Linux 5java-1.6.0-openjdk1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 5java-1.6.0-openjdk-debuginfo1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 5java-1.6.0-openjdk-demo1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 5java-1.6.0-openjdk-devel1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 5java-1.6.0-openjdk-javadoc1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 5java-1.6.0-openjdk-src1:1.6.0.0-1.25.1.10.6.el5_8
Red Hat Enterprise Linux 6java-1.6.0-openjdk1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat Enterprise Linux 6java-1.6.0-openjdk-debuginfo1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat Enterprise Linux 6java-1.6.0-openjdk-demo1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat Enterprise Linux 6java-1.6.0-openjdk-devel1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat Enterprise Linux 6java-1.6.0-openjdk-javadoc1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat Enterprise Linux 6java-1.6.0-openjdk-src1:1.6.0.0-1.43.1.10.6.el6_2
Red Hat network satellite 5.4java-1.6.0-ibm1:1.6.0.14.0-1jpp.1.el5_9
Red Hat network satellite 5.4java-1.6.0-ibm1:1.6.0.14.0-1jpp.1.el6_4
Red Hat network satellite 5.4java-1.6.0-ibm-devel1:1.6.0.14.0-1jpp.1.el5_9
Red Hat network satellite 5.4java-1.6.0-ibm-devel1:1.6.0.14.0-1jpp.1.el6_4
Red Hat rhel extras 4java-1.6.0-sun1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-demo1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-devel1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-jdbc1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-plugin1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 4java-1.6.0-sun-src1:1.6.0.31-1jpp.1.el4
Red Hat rhel extras 5java-1.6.0-ibm1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-accessibility1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-demo1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-devel1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-javacomm1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-jdbc1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-plugin1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-ibm-src1:1.6.0.10.1-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-demo1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-devel1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-jdbc1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-plugin1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 5java-1.6.0-sun-src1:1.6.0.31-1jpp.1.el5
Red Hat rhel extras 6java-1.6.0-ibm1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-demo1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-devel1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-javacomm1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-jdbc1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-plugin1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-ibm-src1:1.6.0.10.1-1jpp.5.el6_2
Red Hat rhel extras 6java-1.6.0-sun1:1.6.0.31-1jpp.1.el6_2
Red Hat rhel extras 6java-1.6.0-sun-demo1:1.6.0.31-1jpp.1.el6_2
Red Hat rhel extras 6java-1.6.0-sun-devel1:1.6.0.31-1jpp.1.el6_2
Red Hat rhel extras 6java-1.6.0-sun-jdbc1:1.6.0.31-1jpp.1.el6_2
Red Hat rhel extras 6java-1.6.0-sun-plugin1:1.6.0.31-1jpp.1.el6_2
Red Hat rhel extras 6java-1.6.0-sun-src1:1.6.0.31-1jpp.1.el6_2
openSUSE Tumbleweedjava-1_7_0-openjdk1.7.0.121-1.1