CVE-2007-3698: Sun JDK

High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days.

The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service (CPU consumption) via certain SSL/TLS handshake requests.

Affected products

• Sun JDK: version 1.5.0 only; version 1.6.0 only
• Sun JRE: version 1.4.2_11 only; version 1.4.2_12 only; version 1.4.2_13 only; version 1.4.2_14 only; version 1.5.0 only; version 1.6.0 only
• Sun SDK: version 1.4.2_11 only; version 1.4.2_12 only; version 1.4.2_13 only; version 1.4.2_14 only

Published 2007-07-11. Last modified 2026-06-16.