CVE-2011-0311
Estado: ModificadaBaja (3.5)—
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
- Puntuación base: 3.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.78%
- Percentil entre todas las CVEs puntuadas: 78
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-119
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620
- http://www.redhat.com/support/errata/RHSA-2011-1159.html
- http://www.redhat.com/support/errata/RHSA-2011-1265.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65189
- https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602
- http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620
- http://www.redhat.com/support/errata/RHSA-2011-1159.html
- http://www.redhat.com/support/errata/RHSA-2011-1265.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65189
- https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-0311",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:N/A:P",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-09-02T23:55:01.943",
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-1159.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-1265.html",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65189",
"source": "cve@mitre.org"
},
{
"url": "https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551",
"source": "cve@mitre.org"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-1159.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2011-1265.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65189",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read."
},
{
"lang": "es",
"value": "El analizador de archivos de clases en IBM Java antes de v1.4.2 SR13 FP9, tal como se utiliza en IBM Runtimes para Java Technology v5.0.0 antes de SR13 y v6.0.0 antes de SR10, permite a usuarios autenticados remotamente provocar una denegación de servicio (fallo de segmentación de JVM, y posiblemente, el consumo de memoria o un bucle infinito) a través de un campo de atributo de longitud modificada en un archivo de clase, lo que provoca una sobrelectura de buffer."
}
],
"lastModified": "2026-06-16T23:27:10.010",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E576D33E-6CA1-4BAD-9D69-541D0F003DD7",
"versionEndIncluding": "1.4.2.13.8"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82F48415-7D29-488D-B0F0-21BBF67A8025"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "429E0F9B-63D2-46C1-9BB3-C0B91FC5A0B8"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D454628-6074-42C5-B2F4-8ABC5597746E"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC71A3DD-E08E-41FF-8443-5A75AD9F4FB1"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E09B43A6-87FB-4ECA-B837-469AA63FCED7"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55BD6A1E-8043-43AA-980D-8A277CE3CDB2"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8549B650-7862-4C3B-8F26-8D9EC490000E"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89D960CA-0065-44FE-83C4-F02119FEA7CF"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2F28E80-A2FE-4985-8D02-06E6E10D8186"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F8563B4-D8A1-459D-BAEB-2463EF09159C",
"versionEndIncluding": "5.0.12.4"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "658DDD54-C861-4CDC-BC9C-6FE63D881114",
"versionEndIncluding": "6.0.9.0"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A56BF2F0-8CC0-429F-A5B6-C506FDC37093"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAB2F473-FB5D-41EA-A7AC-2C4A004DDD7B"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB6BA998-227B-4300-9741-C8F09B8947D3"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D37B94A5-87E9-4390-943A-39FAAD6A32C9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D44117A-B0BD-4C50-B49D-E5F200ED1DDF"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EED69200-9C79-4A30-8E29-E084B1CDF62B"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15C93D05-FA19-48B4-815A-672658454A9E"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB48BEDD-B1B2-461A-934E-BDDE4AF3A233"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F6AE573-2EC7-4917-9686-89A98D123685"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58D8B506-16B1-4991-90B9-9CC9D3C07F7C"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71526367-0EF6-445E-805C-D53AB71A5885"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2880FA53-BC93-4D39-83E3-FB19AC89485D"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39C1392A-866A-4591-9ED4-D420383AC1D9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57BEF1B1-E4BC-4D8C-A4FF-5CFDBEB9B454"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5265E83-947E-488C-B8D8-9934EE4872E9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C917DA62-6953-4E72-87D5-F177665F9983"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80C5372D-3CED-4BA3-A155-CE2FFCCA1B62"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1403930-A2CA-4052-9BB8-096C218F8D7A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}