CVE-2018-1517

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-20 · updated 2026-06-17
Weakness: CWE-20

Description

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.

Affected products

IBM Software Development Kit: 6-service_refresh_16, 6.0, 6r1-service_refresh_8, 7-service_refresh_10, 7.0, 7r1-service_refresh_4 (+2)
RedHat Enterprise Linux Desktop: 6.0, 7.0
RedHat Enterprise Linux Server: 6.0, 7.0
RedHat Enterprise Linux Workstation: 6.0, 7.0
Red Hat Satellite 6: 5.6, 5.7, 5.8

References

http://www.ibm.com/support/docview.wss?uid=ibm10719653
http://www.securityfocus.com/bid/105117
https://access.redhat.com/errata/RHSA-2018:2568
https://access.redhat.com/errata/RHSA-2018:2569
https://access.redhat.com/errata/RHSA-2018:2575
https://access.redhat.com/errata/RHSA-2018:2576
https://access.redhat.com/errata/RHSA-2018:2712
https://access.redhat.com/errata/RHSA-2018:2713
https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
http://www.ibm.com/support/docview.wss?uid=ibm10719653
http://www.securityfocus.com/bid/105117
https://access.redhat.com/errata/RHSA-2018:2568

Get alerted when CVE-2018-1517 or the next vulnerability affects your stack