Action not permitted
Modal body text goes here.
CVE-2017-10086
Vulnerability from cvelistv5
▼ | URL | Tags | |
---|---|---|---|
secalert_us@oracle.com | http://www.debian.org/security/2017/dsa-4005 | Third Party Advisory | |
secalert_us@oracle.com | http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html | Patch, Vendor Advisory | |
secalert_us@oracle.com | http://www.securityfocus.com/bid/99662 | Broken Link | |
secalert_us@oracle.com | http://www.securitytracker.com/id/1038931 | Broken Link | |
secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2017:1790 | Third Party Advisory | |
secalert_us@oracle.com | https://access.redhat.com/errata/RHSA-2017:1791 | Third Party Advisory | |
secalert_us@oracle.com | https://security.gentoo.org/glsa/201709-22 | Third Party Advisory | |
secalert_us@oracle.com | https://security.netapp.com/advisory/ntap-20170720-0001/ | Third Party Advisory |
▼ | Vendor | Product |
---|---|---|
Oracle Corporation | Java |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T17:25:00.967Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "99662", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/99662" }, { "name": "RHSA-2017:1791", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "name": "RHSA-2017:1790", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20170720-0001/" }, { "name": "DSA-4005", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2017/dsa-4005" }, { "name": "1038931", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1038931" }, { "name": "GLSA-201709-22", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "https://security.gentoo.org/glsa/201709-22" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" } ], "title": "CVE Program Container" }, { "metrics": [ { "other": { "content": { "id": "CVE-2017-10086", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "role": "CISA Coordinator", "timestamp": "2024-10-04T15:39:48.355796Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-10-04T19:05:48.487Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "product": "Java", "vendor": "Oracle Corporation", "versions": [ { "status": "affected", "version": "Java SE: 7u141" }, { "status": "affected", "version": "8u131" } ] } ], "datePublic": "2017-07-18T00:00:00", "descriptions": [ { "lang": "en", "value": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)." } ], "problemTypes": [ { "descriptions": [ { "description": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE.", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-01-04T19:57:01", "orgId": "43595867-4340-4103-b7a2-9a5208d29a85", "shortName": "oracle" }, "references": [ { "name": "99662", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/99662" }, { "name": "RHSA-2017:1791", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "name": "RHSA-2017:1790", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://security.netapp.com/advisory/ntap-20170720-0001/" }, { "name": "DSA-4005", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2017/dsa-4005" }, { "name": "1038931", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1038931" }, { "name": "GLSA-201709-22", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "https://security.gentoo.org/glsa/201709-22" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2017-10086", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Java", "version": { "version_data": [ { "version_affected": "=", "version_value": "Java SE: 7u141" }, { "version_affected": "=", "version_value": "8u131" } ] } } ] }, "vendor_name": "Oracle Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE." } ] } ] }, "references": { "reference_data": [ { "name": "99662", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99662" }, { "name": "RHSA-2017:1791", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "name": "RHSA-2017:1790", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "name": "https://security.netapp.com/advisory/ntap-20170720-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20170720-0001/" }, { "name": "DSA-4005", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-4005" }, { "name": "1038931", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038931" }, { "name": "GLSA-201709-22", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-22" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85", "assignerShortName": "oracle", "cveId": "CVE-2017-10086", "datePublished": "2017-08-08T15:00:00", "dateReserved": "2017-06-21T00:00:00", "dateUpdated": "2024-10-04T19:05:48.487Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2017-10086\",\"sourceIdentifier\":\"secalert_us@oracle.com\",\"published\":\"2017-08-08T15:29:02.677\",\"lastModified\":\"2022-08-12T18:05:38.463\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en el componente Java SE de Oracle Java SE (subcomponente: JavaFX). Las versiones compatibles que se han visto afectadas son JavaSE: 7u141 y 8u131. Una vulnerabilidad f\u00e1cilmente explotable permite que un atacante sin autenticar que tenga acceso a red por medio de m\u00faltiples protocolos comprometa la seguridad de Java SE. Para que los ataques tengan \u00e9xito, se necesita la participaci\u00f3n de otra persona diferente del atacante y, aunque la vulnerabilidad est\u00e1 presente en Java SE, los ataques podr\u00edan afectar seriamente a productos adicionales. Los ataques exitosos a esta vulnerabilidad pueden resultar en la toma de control de Java SE. Nota: Esta vulnerabilidad se aplica a implementaciones Java, normalmente en clientes que ejecutan aplicaciones Java Web Start en sandbox o applets Java en sandbox que cargan y ejecutan c\u00f3digo que no es de confianza (por ejemplo, c\u00f3digo proveniente de internet) y que conf\u00edan en la sandbox de Java para protegerse. Esta vulnerabilidad no se aplica a implementaciones Java, normalmente en servidores, que solo cargan y ejecutan c\u00f3digo de confianza (por ejemplo, c\u00f3digo instalado por un administrador). CVSS 3.0 Base Score 9.6 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.6,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":2.8,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":6.8},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4D0E043-D34F-446D-879B-692E3CF500C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*\",\"matchCriteriaId\":\"106E9F69-857A-42F8-A727-2650C896D3B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*\",\"matchCriteriaId\":\"363C8E7E-2EEA-4308-A141-854B9EC17AAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*\",\"matchCriteriaId\":\"595FC4B7-418E-457C-ADCC-0A49A676D629\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"7.3\",\"matchCriteriaId\":\"BD075607-09B7-493E-8611-66D041FFDA62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*\",\"versionStartIncluding\":\"9.5\",\"matchCriteriaId\":\"0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C2089EE-5D7F-47EC-8EA5-0F69790564C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndIncluding\":\"11.70.1\",\"matchCriteriaId\":\"73F81EC3-4AB0-4CD7-B845-267C5974DE98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D9CC59D-6182-4B5E-96B5-226FCD343916\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85DF4B3F-4BBC-42B7-B729-096934523D63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1BE6C1F-2565-4E97-92AA-16563E5660A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"698C6261-679D-45C1-A396-57AC96AD64D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BD81527-A341-42C3-9AB9-880D3DB04B08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*\",\"versionStartIncluding\":\"7.1\",\"matchCriteriaId\":\"BB6FD3C7-7214-4E28-9A88-FBA91F2A4277\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"7.1\",\"matchCriteriaId\":\"A85C4E34-7F3B-4137-9D4C-9C80490B3409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*\",\"matchCriteriaId\":\"3FA5E22C-489B-4C5F-A5F3-C03F45CA8811\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*\",\"matchCriteriaId\":\"26A2B713-7D6D-420A-93A4-E0D983C983DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*\",\"matchCriteriaId\":\"64DE38C8-94F1-4860-B045-F33928F676A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E94F7F59-1785-493F-91A7-5F5EA5E87E4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"7.2\",\"matchCriteriaId\":\"1E35D95E-CCBF-4335-A4DB-02218BA172DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4022E33-B50C-4B0D-8485-F9091B6E57E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2\",\"matchCriteriaId\":\"13270F58-E106-48CE-9933-E68AABBBFC21\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"923F6B82-6A8B-4994-89F6-C430775D5234\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*\",\"versionStartIncluding\":\"7.2\",\"matchCriteriaId\":\"B7B42CB6-3C14-4183-AFA8-C3682F8B54AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"2AA40F7F-504D-47A9-9778-EC4CE46EB8BF\"}]}]}],\"references\":[{\"url\":\"http://www.debian.org/security/2017/dsa-4005\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/99662\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"http://www.securitytracker.com/id/1038931\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1790\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1791\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201709-22\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20170720-0001/\",\"source\":\"secalert_us@oracle.com\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
rhsa-2017_1790
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 8 to version 8 Update 141.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section. (CVE-2017-10053, CVE-2017-10067, CVE-2017-10074, CVE-2017-10078, CVE-2017-10081, CVE-2017-10086, CVE-2017-10087, CVE-2017-10089, CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10102, CVE-2017-10105, CVE-2017-10107, CVE-2017-10108, CVE-2017-10109, CVE-2017-10110, CVE-2017-10111, CVE-2017-10114, CVE-2017-10115, CVE-2017-10116, CVE-2017-10118, CVE-2017-10135, CVE-2017-10176, CVE-2017-10193, CVE-2017-10198, CVE-2017-10243)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1790", "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javase/8u141-relnotes-3720385.html", "url": "http://www.oracle.com/technetwork/java/javase/8u141-relnotes-3720385.html" }, { "category": "external", "summary": "1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "1471526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471526" }, { "category": "external", "summary": "1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "1471534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471534" }, { "category": "external", "summary": "1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "1471711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471711" }, { "category": "external", "summary": "1471715", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471715" }, { "category": "external", "summary": "1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "1471871", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471871" }, { "category": "external", "summary": "1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "1471898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471898" }, { "category": "external", "summary": "1472320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472320" }, { "category": "external", "summary": "1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "1472470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472470" }, { "category": "external", "summary": "1472476", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472476" }, { "category": "external", "summary": "1472657", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472657" }, { "category": "external", "summary": "1472662", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472662" }, { "category": "external", "summary": "1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1790.json" } ], "title": "Red Hat Security Advisory: java-1.8.0-oracle security update", "tracking": { "current_release_date": "2024-11-05T20:06:54+00:00", "generator": { "date": "2024-11-05T20:06:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1790", "initial_release_date": "2017-07-20T16:16:51+00:00", "revision_history": [ { "date": "2017-07-20T16:16:51+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-14T15:16:58+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:06:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.141-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.141-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-src@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-jdbc@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-devel@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-plugin@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "product": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "product_id": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.8.0-oracle-javafx@1.8.0.141-1jpp.1.el6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-10053", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471889" } ], "notes": [ { "category": "description", "text": "It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10053" }, { "category": "external", "summary": "RHBZ#1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)" }, { "cve": "CVE-2017-10067", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471535" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10067" }, { "category": "external", "summary": "RHBZ#1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10067", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10067" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)" }, { "cve": "CVE-2017-10074", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471534" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10074" }, { "category": "external", "summary": "RHBZ#1471534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471534" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10074", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10074" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10074", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10074" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)" }, { "cve": "CVE-2017-10078", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471898" } ], "notes": [ { "category": "description", "text": "It was discovered that the Nashorn JavaScript engine in the Scripting component of OpenJDK could allow scripts to access Java APIs even when access to Java APIs was disabled. An untrusted JavaScript executed by Nashorn could use this flaw to bypass intended restrictions.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10078" }, { "category": "external", "summary": "RHBZ#1471898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10078", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10078" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10078", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10078" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539)" }, { "cve": "CVE-2017-10081", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471711" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10081" }, { "category": "external", "summary": "RHBZ#1471711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471711" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10081", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10081" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10081", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10081" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)" }, { "cve": "CVE-2017-10086", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472657" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10086" }, { "category": "external", "summary": "RHBZ#1472657", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472657" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10086", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10086" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)" }, { "cve": "CVE-2017-10087", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471521" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10087" }, { "category": "external", "summary": "RHBZ#1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)" }, { "cve": "CVE-2017-10089", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471270" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10089" }, { "category": "external", "summary": "RHBZ#1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10089", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10089" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)" }, { "cve": "CVE-2017-10090", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471517" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10090" }, { "category": "external", "summary": "RHBZ#1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10090", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10090" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)" }, { "cve": "CVE-2017-10096", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471528" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10096" }, { "category": "external", "summary": "RHBZ#1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10096", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10096" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)" }, { "cve": "CVE-2017-10101", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471527" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10101" }, { "category": "external", "summary": "RHBZ#1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10101", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10101" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)" }, { "cve": "CVE-2017-10102", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472345" } ], "notes": [ { "category": "description", "text": "It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10102" }, { "category": "external", "summary": "RHBZ#1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10102", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10102" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)" }, { "cve": "CVE-2017-10105", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472667" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10105" }, { "category": "external", "summary": "RHBZ#1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10105", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10105" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)" }, { "cve": "CVE-2017-10107", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471266" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10107" }, { "category": "external", "summary": "RHBZ#1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10107", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10107" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)" }, { "cve": "CVE-2017-10108", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471888" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10108" }, { "category": "external", "summary": "RHBZ#1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)" }, { "cve": "CVE-2017-10109", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471670" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10109" }, { "category": "external", "summary": "RHBZ#1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10109", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10109" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)" }, { "cve": "CVE-2017-10110", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471523" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10110" }, { "category": "external", "summary": "RHBZ#1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10110", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10110" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)" }, { "cve": "CVE-2017-10111", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471526" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10111" }, { "category": "external", "summary": "RHBZ#1471526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471526" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10111", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10111" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10111", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10111" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185)" }, { "cve": "CVE-2017-10114", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472662" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10114" }, { "category": "external", "summary": "RHBZ#1472662", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472662" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10114", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10114" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10114", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10114" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)" }, { "cve": "CVE-2017-10115", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471851" } ], "notes": [ { "category": "description", "text": "A covert timing channel flaw was found in the DSA implementation in the JCE component of OpenJDK. A remote attacker able to make a Java application generate DSA signatures on demand could possibly use this flaw to extract certain information about the used key via a timing side channel.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DSA implementation timing attack (JCE, 8175106)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10115" }, { "category": "external", "summary": "RHBZ#1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10115", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10115" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DSA implementation timing attack (JCE, 8175106)" }, { "cve": "CVE-2017-10116", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471738" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAPCertStore class in the Security component of OpenJDK followed LDAP referrals to arbitrary URLs. A specially crafted LDAP referral URL could cause LDAPCertStore to communicate with non-LDAP servers.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10116" }, { "category": "external", "summary": "RHBZ#1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10116", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10116" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)" }, { "cve": "CVE-2017-10118", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472470" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ECDSA implementation timing attack (JCE, 8175110)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10118" }, { "category": "external", "summary": "RHBZ#1472470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472470" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10118", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10118" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10118", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10118" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: ECDSA implementation timing attack (JCE, 8175110)" }, { "cve": "CVE-2017-10135", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471871" } ], "notes": [ { "category": "description", "text": "A covert timing channel flaw was found in the PKCS#8 implementation in the JCE component of OpenJDK. A remote attacker able to make a Java application repeatedly compare PKCS#8 key against an attacker controlled value could possibly use this flaw to determine the key via a timing side channel.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10135" }, { "category": "external", "summary": "RHBZ#1471871", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471871" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10135", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10135" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10135", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10135" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)" }, { "cve": "CVE-2017-10176", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472476" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of certain EC points (Security, 8178135)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10176" }, { "category": "external", "summary": "RHBZ#1472476", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472476" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10176", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10176" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10176", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10176" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect handling of certain EC points (Security, 8178135)" }, { "cve": "CVE-2017-10193", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471715" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect key size constraint check (Security, 8179101)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10193" }, { "category": "external", "summary": "RHBZ#1471715", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471715" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10193", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10193" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10193", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10193" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect key size constraint check (Security, 8179101)" }, { "cve": "CVE-2017-10198", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472320" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions defined for processing of X.509 certificate chains. A remote attacker could possibly use this flaw to make Java accept certificate using one of the disabled algorithms.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10198" }, { "category": "external", "summary": "RHBZ#1472320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10198", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10198" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10198", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10198" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)" }, { "cve": "CVE-2017-10243", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472666" } ], "notes": [ { "category": "description", "text": "It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak information.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10243" }, { "category": "external", "summary": "RHBZ#1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10243", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T16:16:51+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-devel-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-javafx-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-jdbc-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-plugin-1:1.8.0.141-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.8.0-oracle-src-1:1.8.0.141-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)" } ] }
rhsa-2017_1791
Vulnerability from csaf_redhat
Notes
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for java-1.7.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.\n\nThis update upgrades Oracle Java SE 7 to version 7 Update 151.\n\nSecurity Fix(es):\n\n* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section. (CVE-2017-10053, CVE-2017-10067, CVE-2017-10074, CVE-2017-10081, CVE-2017-10086, CVE-2017-10087, CVE-2017-10089, CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10102, CVE-2017-10105, CVE-2017-10107, CVE-2017-10108, CVE-2017-10109, CVE-2017-10110, CVE-2017-10114, CVE-2017-10115, CVE-2017-10116, CVE-2017-10118, CVE-2017-10135, CVE-2017-10176, CVE-2017-10193, CVE-2017-10198, CVE-2017-10243)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2017:1791", "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#critical", "url": "https://access.redhat.com/security/updates/classification/#critical" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_151", "url": "http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_151" }, { "category": "external", "summary": "1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "1471534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471534" }, { "category": "external", "summary": "1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "1471711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471711" }, { "category": "external", "summary": "1471715", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471715" }, { "category": "external", "summary": "1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "1471871", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471871" }, { "category": "external", "summary": "1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "1472320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472320" }, { "category": "external", "summary": "1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "1472470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472470" }, { "category": "external", "summary": "1472476", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472476" }, { "category": "external", "summary": "1472657", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472657" }, { "category": "external", "summary": "1472662", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472662" }, { "category": "external", "summary": "1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1791.json" } ], "title": "Red Hat Security Advisory: java-1.7.0-oracle security update", "tracking": { "current_release_date": "2024-11-05T20:07:04+00:00", "generator": { "date": "2024-11-05T20:07:04+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2017:1791", "initial_release_date": "2017-07-20T15:59:11+00:00", "revision_history": [ { "date": "2017-07-20T15:59:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2017-12-14T14:49:45+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T20:07:04+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:7" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } }, { "category": "product_name", "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product": { "name": "Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_oracle_java:6" } } } ], "category": "product_family", "name": "Oracle Java for Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.151-1jpp.1.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.151-1jpp.1.el6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.151-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.151-1jpp.1.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-devel@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-src@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-javafx@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-jdbc@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "product": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "product_id": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/java-1.7.0-oracle-plugin@1.7.0.151-1jpp.1.el6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Desktop 6", "product_id": "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Client-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux HPC Node 6", "product_id": "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6ComputeNode-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server 6", "product_id": "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Server-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation 6", "product_id": "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "relates_to_product_reference": "6Workstation-OracleJava-6.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Client-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)", "product_id": "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7ComputeNode-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Server-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64 as a component of Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" }, "product_reference": "java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "relates_to_product_reference": "7Workstation-OracleJava-7.3.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2017-10053", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471889" } ], "notes": [ { "category": "description", "text": "It was discovered that the JPEGImageReader implementation in the 2D component of OpenJDK would, in certain cases, read all image data even if it was not used later. A specially crafted image could cause a Java application to temporarily use an excessive amount of CPU and memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10053" }, { "category": "external", "summary": "RHBZ#1471889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471889" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10053", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10053" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10053" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209)" }, { "cve": "CVE-2017-10067", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471535" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10067" }, { "category": "external", "summary": "RHBZ#1471535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10067", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10067" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10067" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392)" }, { "cve": "CVE-2017-10074", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471534" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10074" }, { "category": "external", "summary": "RHBZ#1471534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471534" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10074", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10074" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10074", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10074" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770)" }, { "cve": "CVE-2017-10081", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471711" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10081" }, { "category": "external", "summary": "RHBZ#1471711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471711" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10081", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10081" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10081", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10081" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966)" }, { "cve": "CVE-2017-10086", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472657" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10086" }, { "category": "external", "summary": "RHBZ#1472657", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472657" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10086", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10086" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10086", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10086" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)" }, { "cve": "CVE-2017-10087", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471521" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10087" }, { "category": "external", "summary": "RHBZ#1471521", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471521" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10087", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10087" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10087" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204)" }, { "cve": "CVE-2017-10089", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471270" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10089" }, { "category": "external", "summary": "RHBZ#1471270", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471270" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10089", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10089" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10089" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461)" }, { "cve": "CVE-2017-10090", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471517" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10090" }, { "category": "external", "summary": "RHBZ#1471517", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471517" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10090", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10090" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10090" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)" }, { "cve": "CVE-2017-10096", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471528" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10096" }, { "category": "external", "summary": "RHBZ#1471528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471528" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10096", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10096" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10096" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469)" }, { "cve": "CVE-2017-10101", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471527" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10101" }, { "category": "external", "summary": "RHBZ#1471527", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471527" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10101", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10101" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10101" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286)" }, { "cve": "CVE-2017-10102", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472345" } ], "notes": [ { "category": "description", "text": "It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbitrary code with the privileges of RMI registry or a Java RMI application.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10102" }, { "category": "external", "summary": "RHBZ#1472345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472345" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10102", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10102" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10102" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: incorrect handling of references in DGC (RMI, 8163958)" }, { "cve": "CVE-2017-10105", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472667" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10105" }, { "category": "external", "summary": "RHBZ#1472667", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472667" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10105", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10105" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10105" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment)" }, { "cve": "CVE-2017-10107", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471266" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10107" }, { "category": "external", "summary": "RHBZ#1471266", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471266" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10107", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10107" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10107" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697)" }, { "cve": "CVE-2017-10108", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471888" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10108" }, { "category": "external", "summary": "RHBZ#1471888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471888" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10108", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10108" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10108" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105)" }, { "cve": "CVE-2017-10109", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471670" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10109" }, { "category": "external", "summary": "RHBZ#1471670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10109", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10109" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10109" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)" }, { "cve": "CVE-2017-10110", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471523" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10110" }, { "category": "external", "summary": "RHBZ#1471523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471523" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10110", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10110" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10110" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)" }, { "cve": "CVE-2017-10114", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472662" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "summary", "text": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10114" }, { "category": "external", "summary": "RHBZ#1472662", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472662" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10114", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10114" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10114", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10114" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ], "title": "JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)" }, { "cve": "CVE-2017-10115", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471851" } ], "notes": [ { "category": "description", "text": "A covert timing channel flaw was found in the DSA implementation in the JCE component of OpenJDK. A remote attacker able to make a Java application generate DSA signatures on demand could possibly use this flaw to extract certain information about the used key via a timing side channel.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: DSA implementation timing attack (JCE, 8175106)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10115" }, { "category": "external", "summary": "RHBZ#1471851", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471851" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10115", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10115" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10115" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: DSA implementation timing attack (JCE, 8175106)" }, { "cve": "CVE-2017-10116", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471738" } ], "notes": [ { "category": "description", "text": "It was discovered that the LDAPCertStore class in the Security component of OpenJDK followed LDAP referrals to arbitrary URLs. A specially crafted LDAP referral URL could cause LDAPCertStore to communicate with non-LDAP servers.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10116" }, { "category": "external", "summary": "RHBZ#1471738", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471738" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10116", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10116" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10116" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "OpenJDK: LDAPCertStore following referrals to non-LDAP URLs (Security, 8176067)" }, { "cve": "CVE-2017-10118", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472470" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: ECDSA implementation timing attack (JCE, 8175110)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10118" }, { "category": "external", "summary": "RHBZ#1472470", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472470" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10118", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10118" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10118", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10118" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: ECDSA implementation timing attack (JCE, 8175110)" }, { "cve": "CVE-2017-10135", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471871" } ], "notes": [ { "category": "description", "text": "A covert timing channel flaw was found in the PKCS#8 implementation in the JCE component of OpenJDK. A remote attacker able to make a Java application repeatedly compare PKCS#8 key against an attacker controlled value could possibly use this flaw to determine the key via a timing side channel.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10135" }, { "category": "external", "summary": "RHBZ#1471871", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471871" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10135", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10135" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10135", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10135" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: PKCS#8 implementation timing attack (JCE, 8176760)" }, { "cve": "CVE-2017-10176", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472476" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect handling of certain EC points (Security, 8178135)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10176" }, { "category": "external", "summary": "RHBZ#1472476", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472476" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10176", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10176" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10176", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10176" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect handling of certain EC points (Security, 8178135)" }, { "cve": "CVE-2017-10193", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1471715" } ], "notes": [ { "category": "description", "text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect key size constraint check (Security, 8179101)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10193" }, { "category": "external", "summary": "RHBZ#1471715", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1471715" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10193", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10193" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10193", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10193" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "OpenJDK: incorrect key size constraint check (Security, 8179101)" }, { "cve": "CVE-2017-10198", "discovery_date": "2017-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472320" } ], "notes": [ { "category": "description", "text": "It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions defined for processing of X.509 certificate chains. A remote attacker could possibly use this flaw to make Java accept certificate using one of the disabled algorithms.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10198" }, { "category": "external", "summary": "RHBZ#1472320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472320" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10198", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10198" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10198", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10198" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: incorrect enforcement of certificate path restrictions (Security, 8179998)" }, { "cve": "CVE-2017-10243", "discovery_date": "2017-07-18T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1472666" } ], "notes": [ { "category": "description", "text": "It was discovered that the wsdlimport tool in the JAX-WS component of OpenJDK did not use secure XML parser settings when parsing WSDL XML documents. A specially crafted WSDL document could cause wsdlimport to use an excessive amount of CPU and memory, open connections to other hosts, or leak information.", "title": "Vulnerability description" }, { "category": "summary", "text": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2017-10243" }, { "category": "external", "summary": "RHBZ#1472666", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1472666" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2017-10243", "url": "https://www.cve.org/CVERecord?id=CVE-2017-10243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10243" }, { "category": "external", "summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixJAVA" } ], "release_date": "2017-07-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2017-07-20T15:59:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Oracle Java must be restarted for this update to take effect.", "product_ids": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2017:1791" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.0" }, "products": [ "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Client-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6ComputeNode-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Server-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el6.x86_64", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.i686", "6Workstation-OracleJava-6.9.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el6.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Client-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7ComputeNode-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Server-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.i686", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-devel-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-javafx-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-jdbc-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-plugin-1:1.7.0.151-1jpp.1.el7_3.x86_64", "7Workstation-OracleJava-7.3.Z:java-1.7.0-oracle-src-1:1.7.0.151-1jpp.1.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "OpenJDK: insecure XML parsing in wsdlimport (JAX-WS, 8182054)" } ] }
gsd-2017-10086
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2017-10086", "description": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "id": "GSD-2017-10086", "references": [ "https://www.suse.com/security/cve/CVE-2017-10086.html", "https://www.debian.org/security/2017/dsa-4005", "https://access.redhat.com/errata/RHSA-2017:1791", "https://access.redhat.com/errata/RHSA-2017:1790" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2017-10086" ], "details": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "id": "GSD-2017-10086", "modified": "2023-12-13T01:21:15.056899Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2017-10086", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Java", "version": { "version_data": [ { "version_affected": "=", "version_value": "Java SE: 7u141" }, { "version_affected": "=", "version_value": "8u131" } ] } } ] }, "vendor_name": "Oracle Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE." } ] } ] }, "references": { "reference_data": [ { "name": "99662", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99662" }, { "name": "RHSA-2017:1791", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "name": "RHSA-2017:1790", "refsource": "REDHAT", "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "name": "https://security.netapp.com/advisory/ntap-20170720-0001/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20170720-0001/" }, { "name": "DSA-4005", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2017/dsa-4005" }, { "name": "1038931", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038931" }, { "name": "GLSA-201709-22", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201709-22" }, { "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.8.0:update131:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jdk:1.7.0:update141:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.7.0:update141:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:oracle:jre:1.8.0:update131:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*", "cpe_name": [], "versionStartIncluding": "7.2", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*", "cpe_name": [], "versionStartIncluding": "7.2", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*", "cpe_name": [], "versionStartIncluding": "9.5", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*", "cpe_name": [], "versionStartIncluding": "7.3", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:virtual_storage_console:6.0:*:*:*:*:vmware_vsphere:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:windows:*:*", "cpe_name": [], "versionStartIncluding": "7.2", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*", "cpe_name": [], "versionStartIncluding": "7.1", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*", "cpe_name": [], "versionStartIncluding": "7.1", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:vmware_vsphere:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "11.70.1", "versionStartIncluding": "11.0", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert_us@oracle.com", "ID": "CVE-2017-10086" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ] }, "references": { "reference_data": [ { "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", "refsource": "CONFIRM", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" }, { "name": "1038931", "refsource": "SECTRACK", "tags": [ "Broken Link" ], "url": "http://www.securitytracker.com/id/1038931" }, { "name": "99662", "refsource": "BID", "tags": [ "Broken Link" ], "url": "http://www.securityfocus.com/bid/99662" }, { "name": "GLSA-201709-22", "refsource": "GENTOO", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/201709-22" }, { "name": "DSA-4005", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "http://www.debian.org/security/2017/dsa-4005" }, { "name": "https://security.netapp.com/advisory/ntap-20170720-0001/", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://security.netapp.com/advisory/ntap-20170720-0001/" }, { "name": "RHSA-2017:1791", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "name": "RHSA-2017:1790", "refsource": "REDHAT", "tags": [ "Third Party Advisory" ], "url": "https://access.redhat.com/errata/RHSA-2017:1790" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.8, "impactScore": 6.0 } }, "lastModifiedDate": "2022-08-12T18:05Z", "publishedDate": "2017-08-08T15:29Z" } } }
ghsa-crqq-83wv-j8rh
Vulnerability from github
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
{ "affected": [], "aliases": [ "CVE-2017-10086" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2017-08-08T15:29:00Z", "severity": "CRITICAL" }, "details": "Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).", "id": "GHSA-crqq-83wv-j8rh", "modified": "2022-05-13T01:16:59Z", "published": "2022-05-13T01:16:59Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-10086" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1790" }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2017:1791" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201709-22" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20170720-0001" }, { "type": "WEB", "url": "http://www.debian.org/security/2017/dsa-4005" }, { "type": "WEB", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/99662" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1038931" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "type": "CVSS_V3" } ] }
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.