CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.033

EPSS Ranking 86.6%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2018-10237

Google » Guava » Version: 11.0

cpe:2.3:a:google:guava:11.0
Google » Guava » Version: 11.0.1

cpe:2.3:a:google:guava:11.0.1
Google » Guava » Version: 11.0.2

cpe:2.3:a:google:guava:11.0.2
Google » Guava » Version: 12.0

cpe:2.3:a:google:guava:12.0
Google » Guava » Version: 12.0.1

cpe:2.3:a:google:guava:12.0.1
Google » Guava » Version: 13.0

cpe:2.3:a:google:guava:13.0
Google » Guava » Version: 13.0.1

cpe:2.3:a:google:guava:13.0.1
Google » Guava » Version: 14.0

cpe:2.3:a:google:guava:14.0
Google » Guava » Version: 14.0.1

cpe:2.3:a:google:guava:14.0.1
Google » Guava » Version: 15.0

cpe:2.3:a:google:guava:15.0
Google » Guava » Version: 16.0

cpe:2.3:a:google:guava:16.0
Google » Guava » Version: 16.0.1

cpe:2.3:a:google:guava:16.0.1
Google » Guava » Version: 17.0

cpe:2.3:a:google:guava:17.0
Google » Guava » Version: 18.0

cpe:2.3:a:google:guava:18.0
Google » Guava » Version: 19.0

cpe:2.3:a:google:guava:19.0
Google » Guava » Version: 20.0

cpe:2.3:a:google:guava:20.0
Google » Guava » Version: 21.0

cpe:2.3:a:google:guava:21.0
Google » Guava » Version: 22.0

cpe:2.3:a:google:guava:22.0
Google » Guava » Version: 23.0

cpe:2.3:a:google:guava:23.0
Google » Guava » Version: 23.1

cpe:2.3:a:google:guava:23.1
Google » Guava » Version: 23.2

cpe:2.3:a:google:guava:23.2
Google » Guava » Version: 23.3

cpe:2.3:a:google:guava:23.3
Google » Guava » Version: 23.4

cpe:2.3:a:google:guava:23.4
Google » Guava » Version: 23.5

cpe:2.3:a:google:guava:23.5
Google » Guava » Version: 23.6

cpe:2.3:a:google:guava:23.6
Google » Guava » Version: 23.6.1

cpe:2.3:a:google:guava:23.6.1
Google » Guava » Version: 24.0

cpe:2.3:a:google:guava:24.0
Google » Guava » Version: 24.1

cpe:2.3:a:google:guava:24.1
Oracle » Banking Payments » Version: 14.1.0

cpe:2.3:a:oracle:banking_payments:14.1.0
Oracle » Banking Payments » Version: 14.3.0

cpe:2.3:a:oracle:banking_payments:14.3.0
Oracle » Banking Payments » Version: 14.4.0

cpe:2.3:a:oracle:banking_payments:14.4.0
Oracle » Communications Ip Service Activator » Version: 7.3.0

cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0
Oracle » Communications Ip Service Activator » Version: 7.4.0

cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0
Oracle » Customer Management And Segmentation Foundation » Version: 18.0

cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0
Oracle » Database Server » Version: 12.2.0.1

cpe:2.3:a:oracle:database_server:12.2.0.1
Oracle » Database Server » Version: 18c

cpe:2.3:a:oracle:database_server:18c
Oracle » Database Server » Version: 19c

cpe:2.3:a:oracle:database_server:19c
Oracle » Flexcube Investor Servicing » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0
Oracle » Flexcube Investor Servicing » Version: 12.3.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0
Oracle » Flexcube Investor Servicing » Version: 12.4.0

cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0
Oracle » Flexcube Investor Servicing » Version: 14.0.0

cpe:2.3:a:oracle:flexcube_investor_servicing:14.0.0
Oracle » Flexcube Investor Servicing » Version: 14.1.0

cpe:2.3:a:oracle:flexcube_investor_servicing:14.1.0
Oracle » Flexcube Private Banking » Version: 12.0.0

cpe:2.3:a:oracle:flexcube_private_banking:12.0.0
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Retail Integration Bus » Version: 15.0

cpe:2.3:a:oracle:retail_integration_bus:15.0
Oracle » Retail Integration Bus » Version: 16.0

cpe:2.3:a:oracle:retail_integration_bus:16.0
Oracle » Retail Xstore Point Of Service » Version: 15.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0
Oracle » Retail Xstore Point Of Service » Version: 16.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1
Oracle » Weblogic Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0
Redhat » Jboss Enterprise Application Platform » Version: 6.4.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0
Redhat » Jboss Enterprise Application Platform » Version: 7.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0
Redhat » Openshift Container Platform » Version: 3.11

cpe:2.3:a:redhat:openshift_container_platform:3.11
Redhat » Openshift Container Platform » Version: 4.1

cpe:2.3:a:redhat:openshift_container_platform:4.1
Redhat » Openstack » Version: 13

cpe:2.3:a:redhat:openstack:13
Redhat » Satellite » Version: 6.4

cpe:2.3:a:redhat:satellite:6.4
Redhat » Satellite Capsule » Version: 6.4

cpe:2.3:a:redhat:satellite_capsule:6.4
Redhat » Virtualization » Version: 4.0

cpe:2.3:a:redhat:virtualization:4.0
Redhat » Virtualization » Version: 4.2

cpe:2.3:a:redhat:virtualization:4.2
Redhat » Virtualization Host » Version: 4.0

cpe:2.3:a:redhat:virtualization_host:4.0
Redhat » Enterprise Linux » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux:5.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10237

Products

Pricing

Contact Us