CVE-2017-10355 is a vulnerability in the Networking subcomponent of Oracle Java SE, Java SE Embedded, and JRockit, affecting versions 6u161, 7u151, 8u144, 9, and R28.3.15 respectively. This easily exploitable vulnerability allows an unauthenticated attacker with network access to cause a partial denial of service. The CVSS 3.0 Base Score is 5.3 (Medium), indicating a low impact on availability, with no confidentiality or integrity impacts. While there is no evidence of active exploitation or widespread community discussion, an exploit for a related denial-of-service vulnerability in Apache Xerces 2.11.0 (EDB-44057) references PDF/Docx, which could be relevant given the Networking component.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.6.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.6.0:update161:*:*:*:*:*:* | ||
1.7.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.7.0:update151:*:*:*:*:*:* | ||
1.8.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.8.0:update144:*:*:*:*:*:* | ||
1.9.0CPE matchmatch criteria | cpe:2.3:a:oracle:jdk:1.9.0:*:*:*:*:*:*:* | ||
1.6.0CPE matchmatch criteria | cpe:2.3:a:oracle:jre:1.6.0:update161:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.