CVE ID:	CVE-2013-0440
Description:	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 7, allows remote attackers to affect availability via vectors related to JSSE. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to CPU consumption in the SSL/TLS implementation via a large number of ClientHello packets that are not properly handled by (1) ClientHandshaker.java and (2) ServerHandshaker.java.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0440 BugTraq ID: 57712 http://www.securityfocus.com/bid/57712 Cert/CC Advisory: TA13-032A http://www.us-cert.gov/cas/techalerts/TA13-032A.html CERT/CC vulnerability note: VU#858729 http://www.kb.cert.org/vuls/id/858729 http://security.gentoo.org/glsa/glsa-201406-32.xml HPdes Security Advisory: HPSBMU02874 http://marc.info/?l=bugtraq&m=136733161405818&w=2 HPdes Security Advisory: HPSBUX02857 http://marc.info/?l=bugtraq&m=136439120408139&w=2 HPdes Security Advisory: HPSBUX02864 http://marc.info/?l=bugtraq&m=136570436423916&w=2 HPdes Security Advisory: SSRT101103 http://marc.info/?l=bugtraq&m=136439120408139&w=2 HPdes Security Advisory: SSRT101156 http://marc.info/?l=bugtraq&m=136570436423916&w=2 HPdes Security Advisory: SSRT101184 http://marc.info/?l=bugtraq&m=136733161405818&w=2 http://www.mandriva.com/security/advisories?name=MDVSA-2013:095 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16558 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19285 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19397 RedHat Security Advisories: RHSA-2013:0236 http://rhn.redhat.com/errata/RHSA-2013-0236.html RedHat Security Advisories: RHSA-2013:0237 http://rhn.redhat.com/errata/RHSA-2013-0237.html RedHat Security Advisories: RHSA-2013:0245 http://rhn.redhat.com/errata/RHSA-2013-0245.html RedHat Security Advisories: RHSA-2013:0246 http://rhn.redhat.com/errata/RHSA-2013-0246.html RedHat Security Advisories: RHSA-2013:0247 http://rhn.redhat.com/errata/RHSA-2013-0247.html RedHat Security Advisories: RHSA-2013:1455 http://rhn.redhat.com/errata/RHSA-2013-1455.html RedHat Security Advisories: RHSA-2013:1456 http://rhn.redhat.com/errata/RHSA-2013-1456.html SuSE Security Announcement: SUSE-SU-2013:0478 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html SuSE Security Announcement: openSUSE-SU-2013:0312 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html SuSE Security Announcement: openSUSE-SU-2013:0377 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html