CVE-2010-4476
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
5.0 MediumPublic exploitFix available
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Exploit likelihood
23.5%Down 30.7 points since Feb 4, 2022
What each source reports
NVD Score used
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
- Record
CVE-2010-4476- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
- Record
CVE-2010-4476- Updated
- 2026-11-02
EUVDEUVD-2022-4017 No score
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
- Record
EUVD-2022-4017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gvgc-rxmh-5hvw No score
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.
- Record
GHSA-gvgc-rxmh-5hvw- Updated
- 2026-11-02
OSVGHSA-gvgc-rxmh-5hvw No score
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.
- Record
GHSA-gvgc-rxmh-5hvw- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.7 | 7.0.7 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.32 | 6.0.32 |
org.apache.tomcat:tomcatMaven |
5.5.0 up to 5.5.33 | 5.5.33 |
openjdk-6Debian:6.0 |
before 6b18-1.8.3-2+squeeze1, plus listed versions 6b18-1.8.3-2 |
6b18-1.8.3-2+squeeze1 |
openjdk-6Debian:5.0 |
before 6b18-1.8.3-2~lenny1, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 38 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18~pre1-16b18~pre1-26b18~pre1-36b18~pre1-46b18~pre2-16b18~pre3-16b18~pre4-1 |
6b18-1.8.3-2~lenny1 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4 | 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:5::el4 |
before 0:2.1.10-5.patch01.1.ep5.el4 | 0:2.1.10-5.patch01.1.ep5.el4 |
jbossweb-jsp-2.1-apiRed Hat:jboss_enterprise_application_platform:5::el4 |
before 0:2.1.10-5.patch01.1.ep5.el4 | 0:2.1.10-5.patch01.1.ep5.el4 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:5::el4 |
before 0:2.1.10-5.patch01.1.ep5.el4 | 0:2.1.10-5.patch01.1.ep5.el4 |
jbossweb-servlet-2.5-apiRed Hat:jboss_enterprise_application_platform:5::el4 |
before 0:2.1.10-5.patch01.1.ep5.el4 | 0:2.1.10-5.patch01.1.ep5.el4 |
Show 256 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4 | 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 | 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 | 0:2.0.0-8.CP15.patch01.0jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-jsp-2.1-apiRed Hat:jboss_enterprise_application_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-servlet-2.5-apiRed Hat:jboss_enterprise_application_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbosswebRed Hat:jboss_enterprise_web_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-jsp-2.1-apiRed Hat:jboss_enterprise_web_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-libRed Hat:jboss_enterprise_web_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
jbossweb-servlet-2.5-apiRed Hat:jboss_enterprise_web_platform:5::el5 |
before 0:2.1.10-5.patch01.1.1.ep5.el5 | 0:2.1.10-5.patch01.1.1.ep5.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.18.b17.el5 | 1:1.6.0.0-1.18.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.6.0.0-1.36.b17.el6_0 | 1:1.6.0.0-1.36.b17.el6_0 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.9.0-1jpp.4.el4 | 1:1.6.0.9.0-1jpp.4.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.9.0-1jpp.4.el5 | 1:1.6.0.9.0-1jpp.4.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.9.0-1jpp.5.el6 | 1:1.6.0.9.0-1jpp.5.el6 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.12.3-1jpp.2.el4 | 1:1.5.0.12.3-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.12.3-1jpp.2.el5 | 1:1.5.0.12.3-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.5.0.12.3-1jpp.3.el6 | 1:1.5.0.12.3-1jpp.3.el6 |
java-1.4.2-ibmRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.8-1jpp.4.el4 | 0:1.4.2.13.8-1jpp.4.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.8-1jpp.3.el5 | 0:1.4.2.13.8-1jpp.3.el5 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.8.sap-1jpp.2.el4_8 | 0:1.4.2.13.8.sap-1jpp.2.el4_8 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.8.sap-1jpp.2.el4_8 | 0:1.4.2.13.8.sap-1jpp.2.el4_8 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.8.sap-1jpp.2.el4_8 | 0:1.4.2.13.8.sap-1jpp.2.el4_8 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.8.sap-1jpp.2.el4_8 | 0:1.4.2.13.8.sap-1jpp.2.el4_8 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.8.sap-1jpp.2.el4_8 | 0:1.4.2.13.8.sap-1jpp.2.el4_8 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.8.sap-1jpp.2.el5 | 0:1.4.2.13.8.sap-1jpp.2.el5 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.8.sap-1jpp.2.el5 | 0:1.4.2.13.8.sap-1jpp.2.el5 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.8.sap-1jpp.2.el5 | 0:1.4.2.13.8.sap-1jpp.2.el5 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.8.sap-1jpp.2.el5 | 0:1.4.2.13.8.sap-1jpp.2.el5 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.8.sap-1jpp.2.el5 | 0:1.4.2.13.8.sap-1jpp.2.el5 |
tomcat6Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-javadocRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-libRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-log4jRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-webappsRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-libRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-log4jRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-javadocRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-log4jRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-webappsRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-libRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-log4jRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-libRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:6.0.24-24.el6_0 | 0:6.0.24-24.el6_0 |
tomcat5Red Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-common-libRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-jasperRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-server-libRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat5-webappsRed Hat:enterprise_linux:5::server |
before 0:5.5.23-0jpp.17.el5_6 | 0:5.5.23-0jpp.17.el5_6 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el4 | 0:6.0.24-11.patch_03.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 2 CVEs |
before 0:6.0.24-11.patch_03.ep5.el5 | 0:6.0.24-11.patch_03.ep5.el5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.28-18_patch_03.ep5.el4 | 0:5.5.28-18_patch_03.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.28-12_patch_03.ep5.el5 | 0:5.5.28-12_patch_03.ep5.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Oracle Java - Floating-Point Value Denial of Service | 2011-02-01 |
| PoC in GitHub | grzegorzblaszczyk/CVE-2010-4476-check | 2011-02-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4476 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published February 13, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 23.5%, the 97th percentile. Fixed in org.apache.tomcat:tomcat 7.0.7.
References
secunia.com/advisories/43295
securitytracker.com/id?1025062
hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
redhat.com/support/errata/RHSA-2011-0210.html
oracle.com/technetwork/topics/security/cpuapr2011-301950.html
Show 194 moreShow less
security.gentoo.org/glsa/glsa-201406-32.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14328
marc.info?l=bugtraq&m=134254866602253&w=2
lists.fedoraproject.org/pipermail/package-announce/2011-February/053926.html
lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html
www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02720715&admit=109447627+1298159618320+28353475
www-01.ibm.com/support/docview.wss?uid=swg1PM31983
vupen.com/english/advisories/2011/0422
exploringbinary.com/java-hangs-when-converting-2-2250738585072012e-308
blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html
debian.org/security/2011/dsa-2161
ibm.com/support/docview.wss?uid=swg24029498
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
blog.fortify.com/blog/2011/02/08/Double-Trouble
mandriva.com/security/advisories?name=MDVSA-2011:054
nvd.nist.gov/vuln/detail/CVE-2010-4476
github.com/apache/tomcat/commit/407841c426dc52a4c6b8ccd297df6c484a540056
svn.apache.org/viewvc?view=revision&revision=1066244
tomcat.apache.org/security-5.html
access.redhat.com/errata/RHSA-2011:0210
bugzilla.redhat.com/show_bug.cgi?id=674336
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0210.json
cve.org/CVERecord?id=CVE-2010-4476
rhn.redhat.com/errata/RHBA-2010-0491.html
This page doesn't list everything
Left out here: 85 references. The JSON record has them.