CVE-2009-3876
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...
5.0 Medium
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
Exploit likelihood
3.48%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
- Record
CVE-2009-3876- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
- Record
CVE-2009-3876- Updated
- 2026-11-02
EUVDEUVD-2009-3847 No score
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
- Record
EUVD-2009-3847- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6cmw-6629-4xwg No score
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6...
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to cause a denial of service (memory consumption) via crafted DER encoded data, which is not properly decoded by the ASN.1 DER input stream parser, aka Bug Id 6864911.
- Record
GHSA-6cmw-6629-4xwg- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el4_8 | 0:1.4.2.13.2.sap-1jpp.4.el4_8 |
java-1.4.2-ibmRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-develRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs |
before 0:1.4.2.13.2.sap-1jpp.4.el5_3 | 0:1.4.2.13.2.sap-1jpp.4.el5_3 |
Show 127 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.1.el4 | 1:1.6.0.17-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 22 CVEs |
before 1:1.6.0.17-1jpp.2.el5 | 1:1.6.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs |
before 0:1.5.0.22-1jpp.1.el5 | 0:1.5.0.22-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs |
before 1:1.6.0.0-1.7.b09.el5 | 1:1.6.0.0-1.7.b09.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el3 | 0:1.4.2.13.3-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el4 | 0:1.4.2.13.3-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 0:1.4.2.13.3-1jpp.1.el5 | 0:1.4.2.13.3-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el4 | 1:1.5.0.11-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.11-1jpp.1.el5 | 1:1.5.0.11-1jpp.1.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 From an advisory covering 32 CVEs |
before 0:1.5.0.22-1jpp.1.el4 | 0:1.5.0.22-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3876 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published November 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=126566824131534&w=2
securityfocus.com/bid/36881
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8608
security.gentoo.org/glsa/glsa-200911-02.xml
Show 194 moreShow less
redhat.com/support/errata/RHSA-2009-1694.html
secunia.com/advisories/37231
lists.opensuse.org/opensuse-security-announce/2009-11/msg00010.html
vupen.com/english/advisories/2009/3131
oracle.com/technetwork/topics/security/cpujan2010-084891.html
java.sun.com/javase/6/webnotes/6u17.html
sunsolve.sun.com/search/document.do?assetkey=1-66-270476-1
mandriva.com/security/advisories?name=MDVSA-2010:084
nvd.nist.gov/vuln/detail/CVE-2009-3876
github.com/advisories/GHSA-6cmw-6629-4xwg
access.redhat.com/errata/RHSA-2009:1551
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=472206
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1551.json
cve.org/CVERecord?id=CVE-2008-5349
blogs.sun.com/security/entry/advance_notification_of_security_updates6
This page doesn't list everything
Left out here: 45 references. The JSON record has them.