CVE-2019-17359
- Source
- https://cve.org/CVERecord?id=CVE-2019-17359
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17359.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-17359
- Aliases
- Downstream
- Related
- Published
- 2019-10-08T14:15:10.573Z
- Modified
- 2026-07-08T05:56:27.107915677Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
- Database specific
{ "unresolved_ranges": [ { "extracted_events": [ { "introduced": "7.3" }, { "introduced": "7.3" }, { "introduced": "9.5" } ], "source": "CPE_RANGE", "vendor_product": "netapp:active_iq_unified_manager", "cpes": [ "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:linux:*:*", "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*", "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*" ] }, { "extracted_events": [ { "introduced": "3.0.1.0" }, { "last_affected": "3.0.2.1" } ], "source": "CPE_RANGE", "vendor_product": "oracle:communications_convergence", "cpes": [ "cpe:2.3:a:oracle:communications_convergence:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.0.0" }, { "last_affected": "8.2.2" } ], "source": "CPE_RANGE", "vendor_product": "oracle:communications_diameter_signaling_router", "cpes": [ "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.2.0" }, { "last_affected": "8.2.2" } ], "source": "CPE_RANGE", "vendor_product": "oracle:communications_session_route_manager", "cpes": [ "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.0.6" }, { "last_affected": "8.0.9" } ], "source": "CPE_RANGE", "vendor_product": "oracle:financial_services_analytical_applications_infrastructure", "cpes": [ "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:business_process_management_suite", "cpes": [ "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*" ] }, { "cpes": [ "cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:data_integrator", "extracted_events": [ { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ] }, { "extracted_events": [ { "introduced": "12.0.0" }, { "last_affected": "12.0.0" }, { "introduced": "12.1.0" }, { "last_affected": "12.1.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:flexcube_private_banking", "cpes": [ "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "4.2.0" }, { "last_affected": "4.2.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:hospitality_guest_access", "cpes": [ "cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:managed_file_transfer", "cpes": [ "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "9.2" }, { "last_affected": "9.2" } ], "source": "CPE_STRING", "vendor_product": "oracle:peoplesoft_enterprise_hcm_global_payroll_switzerland", "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_hcm_global_payroll_switzerland:9.2:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "8.56" }, { "last_affected": "8.56" }, { "introduced": "8.57" }, { "last_affected": "8.57" }, { "introduced": "8.58" }, { "last_affected": "8.58" } ], "source": "CPE_STRING", "vendor_product": "oracle:peoplesoft_enterprise_peopletools", "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*" ] }, { "cpes": [ "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:retail_xstore_point_of_service", "extracted_events": [ { "introduced": "18.0.1" }, { "last_affected": "18.0.1" } ] }, { "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:soa_suite", "cpes": [ "cpe:2.3:a:oracle:soa_suite:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:soa_suite:12.2.1.4.0:*:*:*:*:*:*:*" ] }, { "extracted_events": [ { "introduced": "11.1.1.9.0" }, { "last_affected": "11.1.1.9.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING", "vendor_product": "oracle:webcenter_portal", "cpes": [ "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*" ] }, { "cpes": [ "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:weblogic_server", "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ] } ] }- References
-
- https://lists.apache.org/thread.html/r02f887807a49cfd1f1ad53f7a61f3f8e12f60ba2c930bec163031209%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r16c3a90cb35ae8a9c74fd5c813c16d6ac255709c9f9d71cd409e007d%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r467ade3fef3493f1fff1a68a256d087874e1f858ad1de7a49fe05d27%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r4d475dcaf4f57115fa57d8e06c3823ca398b35468429e7946ebaefdc%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r79b6a6aa0dd1aeb57bd253d94794bc96f1ec005953c4bd5414cc0db0%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r8ecb5b76347f84b6e3c693f980dbbead88c25f77b815053c4e6f2c30%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/r91b07985b1307390a58c5b9707f0b28ef8e9c9e1c86670459f20d601%40%3Ccommits.tomee.apache.org%3E
- https://lists.apache.org/thread.html/re60f980c092ada4bfe236dcfef8b6ca3e8f3b150fc0f51b8cc13d59d%40%3Ccommits.tomee.apache.org%3E
- https://security.netapp.com/advisory/ntap-20191024-0006/
- https://www.bouncycastle.org/latest_releases.html
- https://www.bouncycastle.org/releasenotes.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
Affected packages
Git / github.com/apache/tomee
Affected ranges
- Type
- GIT
- Repo
- https://github.com/apache/tomee
- Events
-
IntroducedLast affected
- Database specific
{ "source": "CPE_STRING", "cpe": [ "cpe:2.3:a:apache:tomee:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomee:7.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:apache:tomee:8.0.1:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.0.7" }, { "last_affected": "7.0.7" }, { "introduced": "7.1.2" }, { "last_affected": "7.1.2" }, { "introduced": "8.0.1" }, { "last_affected": "8.0.1" } ] }