CVE-2011-0311
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java...
CVE-2011-0311 is a low vulnerability (CVSS 3.5) in Ibm Java, published September 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. Fixed in java-1.4.2-ibm 0:1.4.2.13.10-1jpp.1.el4.
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
Exploit likelihood
What each source reports
NVD Score used
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
- Record
CVE-2011-0311- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
- Record
CVE-2011-0311- Updated
- 2026-11-02
EUVDEUVD-2011-0337 No score
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
- Record
EUVD-2011-0337- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4f6f-x539-9v2g No score
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java...
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
- Record
GHSA-4f6f-x539-9v2g- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 |
before 0:1.4.2.13.10-1jpp.1.el4 | 0:1.4.2.13.10-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13.10-1jpp.1.el5 | 0:1.4.2.13.10-1jpp.1.el5 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:4 |
before 0:1.4.2.13.10.sap-1jpp.1.el4_8 | 0:1.4.2.13.10.sap-1jpp.1.el4_8 |
java-1.4.2-ibm-sapRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-demoRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-develRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-javacommRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
java-1.4.2-ibm-sap-srcRed Hat:rhel_extras_sap:5 |
before 0:1.4.2.13.10.sap-1jpp.1.el5 | 0:1.4.2.13.10.sap-1jpp.1.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html
www-01.ibm.com/support/docview.wss?uid=swg1IZ89602
redhat.com/support/errata/RHSA-2011-1159.html
exchange.xforce.ibmcloud.com/vulnerabilities/65189
www-304.ibm.com/support/docview.wss?uid=isg1PM42551
Show 40 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-0311
github.com/advisories/GHSA-4f6f-x539-9v2g
access.redhat.com/errata/RHSA-2011:1159
ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=702349
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1159.json
cve.org/CVERecord?id=CVE-2011-0311