Vulnerability in Sun Jdk

CVE-2009-1093

LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

  • Sun Jdk — versions 1.5.0, 1.6.0
  • Sun Jre — versions 1.5.0, 1.6.0, 1.3.1
  • Sun Sdk — versions 1.3.1, 1.3.1_01, 1.3.1_01a
  • N/a — versions n/a

Weakness classification (CWE)

References