Most recent entries from all

certa-2011-avi-079 — Une vulnérabilité affecte plusieurs implémentations de Java, elle permet un déni de service à distance.

certa-2011-avi-079

EUVD-2026-120690

fkie_cve-2010-4476

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

GHSA-gvgc-rxmh-5hvw — Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

Affected: Maven: org.apache.tomcat:tomcat

The `Double.parseDouble` method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.

gsd-2010-4476

jvndb-2011-000016

IBM DB2 contains a denial-of-service (DoS) vulnerability. IBM DB2 contains a denial-of-service (DoS) vulnerability due to an issue in Java Runtime Environment (JRE).

RHSA-2011:0210 — Red Hat Security Advisory: jbossweb security update

JDK Double.parseDouble Denial-Of-Service