Name: CVE-2008-5349 Status: Candidate URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5349 Reference: SUNALERT:246286 Reference: URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1 Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.
java-1.6.0-openjdk-1.6.0.0-0.20.b09.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.
java-1.6.0-openjdk-1.6.0.0-7.b12.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report.
Another mention of this issue: http://secunia.com/advisories/32991/ (Point 18) ).
This issue has been addressed in following products: Red Hat Network Satellite Server v 5.2 Via RHSA-2009:0466 https://rhn.redhat.com/errata/RHSA-2009-0466.html
This issue has been addressed in following products: Extras for RHEL 3 Extras for RHEL 4 Extras for Red Hat Enterprise Linux 5 Via RHSA-2009:1505 https://rhn.redhat.com/errata/RHSA-2009-1505.html
This issue has been addressed in following products: RHEL 4 for SAP RHEL 5 for SAP Via RHSA-2009:1551 https://rhn.redhat.com/errata/RHSA-2009-1551.html