CVE-2008-5351 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2008-5351 Interim 1 18 2024-10-24T02:11:21Z current 2021-05-30T12:44:51Z 2024-10-24T02:11:21Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2008-5351 Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J7LPIQNOVJP6ROFKFPBV6ZNNL4ZYZ3R4/#J7LPIQNOVJP6ROFKFPBV6ZNNL4ZYZ3R4 E-Mail link for SUSE-SA:2009:001 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PL7IZNAYHLKWGCS4J45AMDIOVKKG4EOV/#PL7IZNAYHLKWGCS4J45AMDIOVKKG4EOV E-Mail link for SUSE-SA:2009:007 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AYQT24EKWRHAP6UPEVW5KMSOJSUTB52N/#AYQT24EKWRHAP6UPEVW5KMSOJSUTB52N E-Mail link for SUSE-SA:2009:018 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7KJCZETGJ3YVUIQOCCWQ4C2N4IQ23R2C/#7KJCZETGJ3YVUIQOCCWQ4C2N4IQ23R2C E-Mail link for SUSE-SR:2009:006 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JF2DXJKMWDC6SPYAB73V7SIV3CDWRRVC/#JF2DXJKMWDC6SPYAB73V7SIV3CDWRRVC E-Mail link for SUSE-SR:2009:010 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 SUSE Linux Enterprise Module for Legacy 12 java-1_4_2-ibm-1.4.2_sr13-0.1.1 java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1.1 java-1_4_2-ibm-plugin-1.4.2_sr13-0.1.1 java-1_6_0-ibm java-1_6_0-ibm-1.6.0-124.6.1 java-1_6_0-ibm-1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-1.6.0_sr16.1-5.9 java-1_6_0-ibm-1.6.0_sr9.3-0.4.1 java-1_6_0-ibm-alsa-1.6.0-124.6.1 java-1_6_0-ibm-alsa-1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-alsa-1.6.0_sr9.3-0.4.1 java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 java-1_6_0-ibm-fonts java-1_6_0-ibm-fonts-1.6.0-124.6.1 java-1_6_0-ibm-fonts-1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 java-1_6_0-ibm-fonts-1.6.0_sr9.3-0.4.1 java-1_6_0-ibm-jdbc java-1_6_0-ibm-jdbc-1.6.0-124.6.1 java-1_6_0-ibm-jdbc-1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 java-1_6_0-ibm-jdbc-1.6.0_sr9.3-0.4.1 java-1_6_0-ibm-plugin java-1_6_0-ibm-plugin-1.6.0-124.6.1 java-1_6_0-ibm-plugin-1.6.0_sr13.1-0.9.1 java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 java-1_6_0-ibm-plugin-1.6.0_sr9.3-0.4.1 java-1_6_0-ibm-x86-1.6.0-124.7.1 java-1_6_0-ibm-1.6.0_sr16.1-5.9 as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_4_2-ibm-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server 11 java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server 11 java-1_4_2-ibm-plugin-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-alsa-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-fonts-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-jdbc-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-plugin-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server 11 java-1_6_0-ibm-1.6.0_sr9.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_6_0-ibm-alsa-1.6.0_sr9.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_6_0-ibm-fonts-1.6.0_sr9.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_6_0-ibm-jdbc-1.6.0_sr9.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_6_0-ibm-plugin-1.6.0_sr9.3-0.4.1 as a component of SUSE Linux Enterprise Server 11 SP2 java-1_6_0-ibm-1.6.0_sr13.1-0.9.1 as a component of SUSE Linux Enterprise Server 11 SP3 java-1_6_0-ibm-alsa-1.6.0_sr13.1-0.9.1 as a component of SUSE Linux Enterprise Server 11 SP3 java-1_6_0-ibm-fonts-1.6.0_sr13.1-0.9.1 as a component of SUSE Linux Enterprise Server 11 SP3 java-1_6_0-ibm-jdbc-1.6.0_sr13.1-0.9.1 as a component of SUSE Linux Enterprise Server 11 SP3 java-1_6_0-ibm-plugin-1.6.0_sr13.1-0.9.1 as a component of SUSE Linux Enterprise Server 11 SP3 java-1_4_2-ibm-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_4_2-ibm-plugin-1.4.2_sr13-0.1.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-alsa-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-fonts-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-jdbc-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-plugin-1.6.0-124.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm-x86-1.6.0-124.7.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 java-1_6_0-ibm as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-fonts as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-jdbc as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm-plugin as a component of SUSE Linux Enterprise Module for Legacy 12 java-1_6_0-ibm as a component of SUSE Linux Enterprise Point of Service 11 SP3 java-1_6_0-ibm as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata java-1_6_0-ibm as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings. CVE-2008-5351 SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-1.6.0_sr16.1-5.9 SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-fonts-1.6.0_sr16.1-5.9 SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5.9 SUSE Linux Enterprise Module for Legacy 12:java-1_6_0-ibm-plugin-1.6.0_sr16.1-5.9 SUSE Linux Enterprise Server 11:java-1_4_2-ibm-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server 11:java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server 11:java-1_4_2-ibm-plugin-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-1.6.0-124.6.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1 SUSE Linux Enterprise Server 11:java-1_6_0-ibm-x86-1.6.0-124.7.1 SUSE Linux Enterprise Server 11 SP2:java-1_6_0-ibm-1.6.0_sr9.3-0.4.1 SUSE Linux Enterprise Server 11 SP2:java-1_6_0-ibm-alsa-1.6.0_sr9.3-0.4.1 SUSE Linux Enterprise Server 11 SP2:java-1_6_0-ibm-fonts-1.6.0_sr9.3-0.4.1 SUSE Linux Enterprise Server 11 SP2:java-1_6_0-ibm-jdbc-1.6.0_sr9.3-0.4.1 SUSE Linux Enterprise Server 11 SP2:java-1_6_0-ibm-plugin-1.6.0_sr9.3-0.4.1 SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-1.6.0_sr13.1-0.9.1 SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-alsa-1.6.0_sr13.1-0.9.1 SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-fonts-1.6.0_sr13.1-0.9.1 SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-jdbc-1.6.0_sr13.1-0.9.1 SUSE Linux Enterprise Server 11 SP3:java-1_6_0-ibm-plugin-1.6.0_sr13.1-0.9.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_4_2-ibm-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_4_2-ibm-jdbc-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_4_2-ibm-plugin-1.4.2_sr13-0.1.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-1.6.0-124.6.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-1.6.0-124.6.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-alsa-x86-1.6.0-124.7.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-fonts-1.6.0-124.6.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-jdbc-1.6.0-124.6.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-plugin-1.6.0-124.6.1 SUSE Linux Enterprise Server for SAP Applications 11:java-1_6_0-ibm-x86-1.6.0-124.7.1 important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P