CVE-2019-2987

OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

Severity Score

3.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Una vulnerabilidad en el producto Java SE de Oracle Java SE (componente: 2D). Las versiones compatibles que están afectadas son en Java SE: 11.0.4 y 13. Una vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de múltiples protocolos comprometer a Java SE. Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Java SE. Nota: Esta vulnerabilidad aplica a las implementaciones de Java, generalmente en clientes que ejecutan aplicaciones de Java Web Start en sandbox o applets de Java en sandbox (en Java SE 8), que cargan y ejecutan código no confiable (por ejemplo, código proveniente del Internet) y dependen del sandbox de Java para la seguridad. Esta vulnerabilidad también puede ser explotada mediante el uso de la API en el componente especificado, por ejemplo, por medio de un servicio web que suministra datos a las API. CVSS 3.0 Puntuación Base 3.7 (Impactos de la Disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-12-14 CVE Reserved
2019-10-16 CVE Published
2023-09-22 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (18)

URL	Tag	Source
https://lists.debian.org/debian-lts-announce/2019/12/msg00005.html	Mailing List
https://seclists.org/bugtraq/2019/Oct/27	Mailing List
https://seclists.org/bugtraq/2019/Oct/31	Mailing List
https://security.netapp.com/advisory/ntap-20191017-0001	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	2020-08-18

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00064.html	2020-08-18
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00066.html	2020-08-18
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00031.html	2020-08-18
https://access.redhat.com/errata/RHSA-2019:3134	2020-08-18
https://access.redhat.com/errata/RHSA-2019:3135	2020-08-18
https://access.redhat.com/errata/RHSA-2019:3136	2020-08-18
https://access.redhat.com/errata/RHSA-2019:3157	2020-08-18
https://access.redhat.com/errata/RHSA-2019:3158	2020-08-18
https://usn.ubuntu.com/4223-1	2020-08-18
https://www.debian.org/security/2019/dsa-4546	2020-08-18
https://www.debian.org/security/2019/dsa-4548	2020-08-18
https://access.redhat.com/security/cve/CVE-2019-2987	2019-10-21
https://bugzilla.redhat.com/show_bug.cgi?id=1761149	2019-10-21

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				11.0.4 Search vendor "Oracle" for product "Jdk" and version "11.0.4"		-		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				13.0.0 Search vendor "Oracle" for product "Jdk" and version "13.0.0"		-		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				11.0.4 Search vendor "Oracle" for product "Jre" and version "11.0.4"		-		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				13.0.0 Search vendor "Oracle" for product "Jre" and version "13.0.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				6.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				6.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				6.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "6.0"		-		Affected
Netapp Search vendor "Netapp"		E-series Santricity Os Controller Search vendor "Netapp" for product "E-series Santricity Os Controller"				>= 11.0.0 <= 11.50.2 Search vendor "Netapp" for product "E-series Santricity Os Controller" and version " >= 11.0.0 <= 11.50.2"		-		Affected
Netapp Search vendor "Netapp"		E-series Santricity Storage Manager Search vendor "Netapp" for product "E-series Santricity Storage Manager"				-		-		Affected
Netapp Search vendor "Netapp"		E-series Santricity Unified Manager Search vendor "Netapp" for product "E-series Santricity Unified Manager"				-		-		Affected
Netapp Search vendor "Netapp"		E-series Santricity Web Services Proxy Search vendor "Netapp" for product "E-series Santricity Web Services Proxy"				-		-		Affected
Netapp Search vendor "Netapp"		Oncommand Workflow Automation Search vendor "Netapp" for product "Oncommand Workflow Automation"				-		-		Affected
Netapp Search vendor "Netapp"		Snapmanager Search vendor "Netapp" for product "Snapmanager"				-		oracle		Affected
Netapp Search vendor "Netapp"		Snapmanager Search vendor "Netapp" for product "Snapmanager"				-		sap		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0"		-		Affected