VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Mar 30, 2019· Updated Jun 17, 2026

CVE-2019-10648

CVE-2019-10648

Description

Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
net.sf.robocode:robocode.hostMaven
< 1.9.3.71.9.3.7

Affected products

5
  • Robo Code/RobocodeOSV2 versions
    VER_1_7_4_3, VER_1_9_2_1, VER_1_9_2_2, …+ 1 more
    • (no CPE)range: VER_1_7_4_3, VER_1_9_2_1, VER_1_9_2_2, …
    • (no CPE)range: <=1.9.3.5
  • Robocode Project/Robocode2 versions
    cpe:2.3:a:robocode:robocode:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:robocode:robocode:*:*:*:*:*:*:*:*range: <=1.9.3.5
    • cpe:2.3:a:robocode:robocode:-:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/net.sf.robocode/robocode.host
    Range: < 1.9.3.7

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.