The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE…

Description

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Scores

EPSS (exploitation in 30 days)

3.8% · top 9.9% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (40)

• RHSA-2008:0132 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2007:0818 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• ADV-2007-2660 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 26933 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://docs.info.apple.com/article.html?artnum=307177 (opens in a new tab)x_refsource_MISCx_transferred
• 24846 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 26314 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:10634 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://support.novell.com/techcenter/psdb/0c36b6416afc3868b8b1b9012955e323.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20070725 Vulnerability in Java Secure Socket Extension (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
• sun-jsse-ssltls-dos(35333) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 29897 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 26015 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 28056 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• APPLE-SA-2007-12-14 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• RHSA-2008:0100 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 26221 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SA:2008:025 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• RHSA-2007:0956 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 26645 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSRT071465 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 28777 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 1018357 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• ADV-2007-4224 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2007-3861 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2007-3009 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 102997 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• 28880 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 27716 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 36663 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• GLSA-200709-15 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 28115 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 29340 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-2495 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• RHSA-2007:1086 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 27203 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 26631 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• BEA07-178.00 (opens in a new tab)vendor-advisoryx_refsource_BEAx_transferred
• 27635 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.cisco.com/warp/public/707/cisco-sr-20070725-jsse.shtml (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-3698](https://trackcve.app/badge/CVE-2007-3698.svg)](https://trackcve.app/cve/CVE-2007-3698)

Record last updated 7 Aug 2024, 14:28 UTC.