CVE-2011-3387
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a...
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
Exploit likelihood
What each source reports
NVD Score used
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
- Record
CVE-2011-3387- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
- Record
CVE-2011-3387- Updated
- 2026-11-02
EUVDEUVD-2011-3350No score
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
- Record
EUVD-2011-3350- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c76f-h47x-j5r2No score
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a...
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
- Record
GHSA-c76f-h47x-j5r2- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs | before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:4 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:5 From an advisory covering 8 CVEs | before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3387 is a medium vulnerability (CVSS 4.0) in Ibm Java, published September 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/69641
www-304.ibm.com/support/docview.wss?uid=isg1PM42551
redhat.com/support/errata/RHSA-2011-1265.html
nvd.nist.gov/vuln/detail/CVE-2011-3387
github.com/advisories/GHSA-c76f-h47x-j5r2
access.redhat.com/errata/RHSA-2011:1159
Show 35 moreShow less
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=702349
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1159.json
cve.org/CVERecord?id=CVE-2011-0311